FortiNAC to Fortigate FSSO troubleshooting

I am successfully receiving dynamic firewall tags on my gate from NAC.

I would now like to setup FSSO Firewall User Tags. 

The FSSO communication on port 8001 is established (NAC port 1 has allow fsso)

However, I am not getting any users/groups listed. NAC is successfully pulling groups from my AD. I think I must be missing a config in NAC.

Any ideas ?