CPPM integration for user-based rules

Have you followed the steps shown here? This document is also mentioned to be helpful.

There are cases of successful integration, are you facing any particular error?

That sounds right and looks more like what I thought. The test rules we created were called SilverPeak Orchestrator Login/Logout in CPPM and that really did not make much sense why that would be the only flows that would show the information. SP has made life a lot better here. Appreciate the reply.

Thanks, yes I had followed that guide and it was very useful.

However, we were concerned about the number of roles that would need to be created per user.

ClearPass would usually dynamically assign multiple roles per user and have enforcement profiles depending on the roles, however FMG only captures the 1st role. Also there is issue with re-auth not being recognized.

Is it possible to integrate ClearPass with Fortinet directly via RSSO and create user-based rules off that?

For instance, User from group X allow to access Finance server, user from group Y allow to access HR server, but other users {NOT(X+Y)} cannot access Finance or HR servers.