Technical Tip: FortiAuthenticator Self-Register Portal with Sponsor Approval

[dbu]

Description	This article describes how to configure a self-service portal with local and remote Sponsor groups.
Scope	FortiAuthenticator v6.6.2, LDAP.
Solution	In this scenario, there are two groups of sponsors, one locally defined on the FortiAuthenticator and another defined on the remote LDAP server.  Portal configuration. To create a portal: Go to Authentication -> Portals -> Portals, and select Create New. Expand the Account Registration and make sure it is Enabled: Enable and Require administrator approval. Enable the Select User Groups allowed to approve new user registrations. Add the sponsor groups for approval. Policies. Configure the portal policy: Portal Access. The portal can be accessed at the URL mentioned in the policy: https://fac.testlab.local/portal/selfservice/selfservicepolicy/ Select the Sponsor drop-down menu to select the Sponsor for approval. Note: Ensure Sponsor users have an email address configured, otherwise, it will not be available from the drop-down menu.