Technical Tip: Configuring FSSO from FortiManager

[Nur]

Description	This article describes how to configure FSSO from FortiManager and push the configuration to FortiGate.
Scope	FortiManager and FSSO.
Solution	Refer to the steps below. Fabric View -> Create new fabric connector. Assign the AD IP Address -> FSSO Password -> default port 8000. FSSO: When choosing the collector agent, there are two types the user/group will display. The setting can be viewed from the 'set directory access' information. 'Standard' show the mydomain/mygroup. 'Advanced' shows the LDAP Distinguished Name. The following screenshot from a lab test shows the standard settings: Before selecting Ok, ensure the FortiManager is able to poll a list from FSSO by selecting 'apply & refresh'. After, create the following objects to assign to the policy rules. From FortiGate, the FSSO object can be seen. Verify from the FSSO side as it displays the FortiGate information and not the FortiManager information.