FortiSASE – Assign endpoint to specific group on first login

Hello forti14,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

If anybody else has any info or advice, please feel free to contribute!

Hello,

We are still looking for an answer to your question.

We will come back to you ASAP.

Hi Forti14,

Please let me know if this info helps:

To have a device automatically join a specific endpoint group in FortiSASE instead of the default group upon first login, you can use custom invitation codes. Here's how you can achieve this:

Using Custom Invitation Codes

1. Create a Custom Invitation Code:

   • Navigate to Endpoint management > Endpoint profiles.
   • Click on the Invitation codes tab.
   • Click Create to start configuring a new invitation code.

2. Configure the Invitation Code:

   • Name: Assign a name to the invitation code (e.g., UntrustedDevices).
   • Expiring: Enable or disable the expiry date for temporary onboarding access.
   • Expiry Date: Set an expiry date if the code is expiring.
   • Endpoint Group: Specify the endpoint group that devices should join when using this invitation code.

3. Save and Use the Code:

   • Click OK to save the invitation code.
   • Select the newly created code in the table and click Copy code to copy it to the clipboard.

4. Distribute the Invitation Code:

   • Provide this custom invitation code to users who will be onboarding their devices. When they use this code during the FortiClient installation, their devices will automatically be assigned to the specified endpoint group.

Prerequisites and Considerations

• Feature Availability: Custom invitation codes are a select availability feature in FortiSASE and are not enabled by default. Ensure your instance is provisioned with Feature version support. If not, contact FortiCare Support to enable it.
• Preconfigured Installers: The default invitation code is preconfigured in FortiClient installers for Windows and macOS. Ensure users use the custom code instead.

I also recommend this article: https://community.fortinet.com/t5/FortiSASE/Technical-Tip-How-to-find-a-FortiSASE-invitation-code-and-create/ta-p/427409