FortiAuthenticator API Endpoint for LDAP Groups

[daemonhunter]

Im trying to find a FAC API endpoint to query what users are in a specific LDAP Group. This is as close as I could get. Unfortunately this only returns groups that are local groups, not LDAP groups.

Anyone else figured out how to do this or if its possible with the current API?

https://docs.fortinet.com/document/fortiauthenticator/6.6.2/rest-api-solution-guide/583007/local-use...

[funkylicious]

why not query the AD/LDAP directly ?

[daemonhunter]

Unfortunately it doesn’t work that way. FA creates a group of LDAP users. It’s FA’s group not the domains.