Technical Tip: How to set ignore user list in Fortiauthenticator for SSO

[jdelafuente_FTNT]

Description

This article describes how to configure the ignore user list directly in FortiAuthenticator for FSSO/SSO method. 

Scope

FortiAuthenticator, FSSO, ignore user list, exempt user in FSSO.

Solution

One best practice in FSSO is to set up an ignore user list for service accounts.

1. Import SSO User: access to SSO -> SSO Users -> Import. 

 

Select Remote LDAP server, and select OK.

 

A new window will appear, expand the tree, find and select the users to ignore, then select OK.

2. Configure Ignore user list. Previous selected users will appear as imported, then go to menu: SSO -> General -> Fortinet Single Sign-On (FSSO) -> Maximum concurrent user sessions -> Select (configure Per User/Group).

 

At the top right in SSO Users mark the users to ignore and then select Exclude from SSO 

 

Choose 'Do not affect current user when excluded user logs in' and select OK. Now, those users will appear as excluded from SSO.