integrate FortiGate in Azure Ad to deploy userbased Policies.

Forum|Forum|1 year ago
June 12, 2025
3 replies
1248 views

can we deploy the User Based policies in similar way we were able to do onsite Active Directory integration using SSO. We normally use FSSO agent for that on AD server, how can we do that on Azure.

PS. I am not talking about forticlient or VPN usage here but actual firewall rulebase using the User Groups.

Best answer by rbraha

Hi @IKORE

You will need in this case to user FortiAuthenticator with FSSOMA to connect with Azure ,where SSOMA mobility agent share username and IP with FAC and it listen as SSO session then it transferred to FGT where you can define user groups on firewall policies. Check this video below it might help understanding.

https://www.youtube.com/watch?v=eMWfDCiHwCQ

rbrahaAnswer

Staff

Hi @IKORE

You will need in this case to user FortiAuthenticator with FSSOMA to connect with Azure ,where SSOMA mobility agent share username and IP with FAC and it listen as SSO session then it transferred to FGT where you can define user groups on firewall policies. Check this video below it might help understanding.

https://www.youtube.com/watch?v=eMWfDCiHwCQ