SSL Vpn with Active Directory authentication

[Jack_T]

Hi all, I would to create a SSL Vpn with Active Directory authentication When I create a new user, I choose remote, LDAP, then I search for domain users but I can' t find anything (no errors, seems that Fortigate can' t search on domain) What are the correct steps for LDAP server and for domain to grant Fortigate to search in Active Directory? Is It possible? Many thanks in advance :) Best regards, Jack

[stukat]

Create a LDAP Server under User & Device, Authentication. Create a User Group under User & Device, User. Set it up using " Firewall" as FortiNet doesn' t allow FSSO via VPN. Use the previously created AD Server and then enter the group name. It must be a CN; ie. CN=Users,OU=PA,DC=Company,DC=com Create a ssl.root policy which uses the created user group as the source. Destination is your internal network. That' s the basics of it.

[rwpatterson]

This old post is dated, but may provide a clue.