FortiManager
FortiManager supports network operations use cases for centralized management, best practices compliance, and workflow automation to provide better protection against breaches.
farhanahmed
Staff
Staff
Article Id 395603
Description This article describes how to update (Apply&Refresh) a FSSO Connector in FortiManager - to get the latest user groups - using API and Postman.
Scope FortiManager.
Solution

FortiManager can learn user group information from Active Directory using an FSSO Connector. If it has been some time since the FortiManager has queried the server, you may wish to bring user group information in FortiManager up-to-date by triggering a new query of the FSSO agent using the FSSO connector.

 

  1. Follow the steps 1 to 5 from the article: Technical Tip: How to Refresh the FortiClient EMS Fabric Connector in FortiManager using the API.

 

  1. Use the query below to update the FSSO Connector in FortiManager:


{
    "id": "1",
    "method": "exec",
    "params": [
        {
            "url": "sys/api/fsso",
            "data": {
                "adom": "{{ADOM}}",
                "user_fsso": "{{FSSO_Connector_Name}}"
            }
        }
    ]
}

 

  1. Send the request.

Example response:

 

fsso.png

 

 

  1. To check that user groups have been updated, go to: Fabric View -> External Connectors -> Select the FSSO Connector -> Edit -> lists updated user groups:

 

fsso_update.png

 

The newly fetched/updated FSSO Groups are available to be used under Policy & Objects.

 

fsso_groups.png


Related documents: