Technical Tip: How to use LDAP Nested Security Groups in FortiNAC

[scitlak]

Description	This article describes how to configure FortiNAC to use LDAP Nested Security Groups in FortiNAC.
Scope	FortiNAC, FortiNAC -F.
Solution	Configure Nested Groups in LDAP and assign one LDAP user as a member of a subgroup.   Under System -> Settings -> Authentication -> LDAP, select both groups and sync the directory. After directory sync, both groups will appear under the Group menu as nested shown below.   When the test 1 user logs on to a host, the host will be a member of the NAC-Test group and of course parent group. When a User Host Profile is configured with Cretaria Parent Group, the host will match the User Host Profile.