SSL-VPN with integrated LDAP (AD) authentication?

[generaltab]

Hello,

I've just replaced my old FortiGate 100 with a new FortiGate 90D. I have a few hardware-based IPSec VPNs that were easy to recreate, which seem to be working as before. However, I'm unable to get SSL-VPN working with LDAP authentication for those that use FortiClient. The Fortigate user in AD already exists for allowing the FortiGate access to AD, as does the SSL-VPN group for controlling membership access. The how-to for setting this up seems to require that users be "imported" rather than provide on-going integration. Are there other instructions somewhere?

Thanks!