Push FSSO from FortiManager to Fortigate

[Kubajs]

Hello,

I'm trying to get FSSO working through Fortimanager. In FortiManager I have set up the FSSO external connector, I have also set up Device Mapping, in policies I can assign users to a rule, however the connector itself does not appear in FortiGate. I have Fortimanager installed on my server, firewalls at customers, so I would need the connector to be migrated to the firewall as well. According to this link, the connector set in FortiManager should be transferred to FortiGate, unfortunately in practice this is not happening.

https://community.fortinet.com/t5/FortiManager/Technical-Tip-Configuring-FSSO-from-FortiManager/ta-p...

If I understood the message at the end of this article, it says that the connector should be transferred to the firewall, right?

https://docs.fortinet.com/document/fortimanager/7.4.2/administration-guide/303084/creating-fsso-conn...

Could someone please advise me?

[Kubajs · Accepted solution]

You must use the group from the FSSO in the rule, otherwise the FSSO will not be transferred to Fortigate.