FortiNAC Captive Portal using Azure AD authentication thru SSID

[jsotta]

Hi, 

I just like to seek a help regarding on my ongoing troubleshoot about using the FortiNAC Captive Portal Login using azure AD athentication. I already follow up this steps but its seems is not working on my end Overview | FortiNAC-F 7.2.0 | Fortinet Document Library . The scenario was if the user wants to connect on Wireless connection user must have their AD account to join on the network. BTW our all product are Fortinet, Fortigate Firewall FortiAP,Fortiswitch, and FortiNAC. 

@ebilcari 

Thank you!

@

.>

[amonmi2]

If pure Azure AD is your goal (not even a virtual DC via Azure AD DS), then AFAIK EAP-TLS with Azure-AD-authed certificate provisioning is your only option if you want native wifi auth. Something like this for example. Otherwise there's always the captive portal approach.

[jsotta]

Hi @amonmi2 , I got your point but we wanted to maximize the use of fortiNAC using thier portal way of authentication.

[ebilcari]

This configuration is proven to work normally. What type of issues are you facing, is the portal showing on the end users, can they proceed with Azure login? Which version of FortiNAC are you currently running?

[jsotta]

Portal is not showing on the user end. I used open SSID and the optional VLAN is point to the isolated VLAN. The version of FortiNAC is 9.4.4.0767

[ebilcari]

As a start please follow all the steps covered in this article than after the portal is successfully open in the end host you can continue with portal customization to use Azure AD. As shown in the article, 'Client MAC Address Filtering' and 'Dynamic VLAN assignment' are required in SSID configurations.

[Hatibi]

If the captive portal is not appearing the steps on this article might help:

https://community.fortinet.com/t5/FortiNAC-F/Technical-Tip-Captive-Portal-is-not-showing-for-Rogue-H...