Technical Tip: Configuring remote sync rules in FortiAuthenticator to populate groups automatically from LDAP directory

[Anonymous]

Description

This article describes how to configure remote sync rule in Fortiauthenticator to populate groups automatically from LDAP directory 

In this example, user1 and user2  that are part of the ‘IT’ security group in AD .Via the remote sync rule we will associate those users to the FAC user group : TESTGROUP 

Related document. 

https://docs.fortinet.com/document/fortiauthenticator/6.2.1/administration-guide/215969/remote-user-...

Solution

1) Creating the group.

Go to Authentication -> User Management -> Remote User Sync Rules.

2) Create the remote sync rule 'Test Sync Rule' with the LDAP syntax filter.

3) In the drop down menu : Group to associate users with select the created group :TESTGROUP.

4) Run the manual sync : Authentication -> User Management -> Remote User Sync Rules -> Manual Sync Tab.

5) Check the results in the user group, the users are added.

Notes.

LDAP filter syntax used: 

(&(objectCategory=user)(memberOf:1.2.840.113556.1.4.1941:=CN=IT,CN=Users,DC=forti,DC=lab))

Related Articles

Technical Tip: LDAP filter syntax

Technical Tip: LDAP filter syntax for groups and remote user sync rules