Skip to main content
pnobels
New Member
Jan 2, 2025 10:23 AM UTC
Question

Forti Authenticator sync sso groups

Hi,

 

i'm looking for a way to sync the sso groups from AD.  Now we manually import a group.  But if the name changes for example, we need to import it manually again.  I don't believe there is an option in the Authenticator environment itself to sync this?

 

Running 6.5.5 btw.

3 replies

AEK
SuperUser
SuperUser
Jan 2, 2025 3:21 PM UTC

Hi

You should use sync rule instead of importing the groups. You can access it via this menu:

User Management > Remote User Sync Rule.

https://docs.fortinet.com/document/fortiauthenticator/6.5.5/administration-guide/215969

Hope it helps.

Translate
AEK
jhussain_FTNT
Staff
Staff
Jan 3, 2025 8:28 AM UTC

Hi,

Please note that remote sync rule  will not sync the user manually imported by Remote Users -> Import.Kindly refer the below document.

 

https://community.fortinet.com/t5/FortiAuthenticator/Technical-Tip-Remote-Sync-rules-will-not-sync-the-user-that/ta-p/302551

 

As update by  AEK, you need use sync rule instead of importing the groups.

 

Regards

Jamal

Translate
pnobels
pnobelsAuthor
New Member
Jan 3, 2025 8:35 AM UTC

Hi, thx for the feedback.  I believe the sync rule can not be made for syncing sso groups? 

Translate
Risk and Resilience in the Age of AI. An OT Thought Leadership Summit for Houston's Critical Infrastructure Leaders. Date: Thursday, December 3, 2026. Time: 8:30 am - 1:30 pm (CT). Location: The Westin Houston, Memorial City | 945 Gessner Road, Houston, TX 77024