Fortimanager fortianalzyer mulitple groups RADIUS?

[mclut]

Longer story short. Looking to setup additional group access in these for read access etc etc.(Using existing RADIUS setup that gates and other network devices are using)

Group claims are not being seen on the FAC by these two platforms.

On gates you can assign a user group and then add the group attribute on the gate. On the manager etc there are no groups set themselves... Rather setting up of remote users. When adding multiple RADIUS policies to the FAC for these devices it basically errors out and doesn't select any group, rather the first group within the FAC.

Thanks

[Markus_M]

Hi,

I don't actually follow here. What are you trying to do?

If I understand correctly you want to match expected user groups to RADIUS clients to be evaluated by the FortiAuthenticator?

Best regards,

Markus

[mclut · Accepted solution]

Correct.

Currently as it stands the authenticator will only evaluate the top most policy from the analyzer or manager even if the RADIUS user has a set group attribute string set within them.

Edit found the solution. Issue was with multiple policies with same devices within each policy.