Technical Tip: Unable to fetch user groups information on FSSO Collector agent

[hvardhang]

Description	This article describes the situation where the user is unable to fetch user groups information on the Fortinet Single Sign-On Collector Agent Service.
Scope	Fortinet Single Sign-On Collector Agent.
Solution	When there is a service account/administrator password getting expired/reset/renewed on the Active Directory results in the FSSO collector agent failing to get group information. The collector agent debug shows below messages where the LDAP bind fails. 02/11/2022 11:47:58 [ 5152] ldaplib::ldap_bind_s failed, server:fermion-kvm52.rishi.com error code:0x31. 02/11/2022 11:47:58 [ 5152] ad_user_get_groups_str2_s():<NONE> Validate and correct with proper username, password details on the collector agent under 'Set Directory Access Information' --Advanced setting--Correct with username and password details. Note: If the Advanced setting shows blank for LDAP configuration, it means Fortinet Single Sign-On uses Service account credentials. It can be validated under 'service.msc', Open services--Fortinet Single Sign-on Agent service--Properties--Logon, correct with credentials.