FSSO advanced mode need ldap

[AMINET]

Hello,

I read in the docs that I need to configure an ldap server on Fortigate if I want to use advanced mode fsso, my question is why does Fortigate need to configure ldap if groupes are alredy learn from Collector Agent.

Thanks

[ebilcari]

In fact you have both options available as User group source. If you choose Collector Agent it will populate with all the groups as they are coming from the Collector. If you want to filter and select only the group that you are interested you can tie it to a LDAP source and select only the interested groups, OU or other custom filters.