Providing Single Sign-On In Advanced Mode For A Windows Ad Network - Fortinet FortiGate 1U Quick Start Manual

Providing Single Sign-On in advanced mode for a
Windows AD network
Using Fortinet Single Sign-On, the FortiGate unit automatically authenticates any
user that successfully logs into Windows. The Domain Controller agent Advanced
mode has the advantage of supporting nested or inherited user groups. If Standard
mode is used, the FortiGate unit can authenticates only users who are a direct
member of a group.
1. Configuring the DC agent for Advanced mode
2. Configuring the DC agent as an FSSO agent
3. Creating an FSSO user group
4. Creating an identity-based security policy
5. Results
166
DC Agent
Windows AD
Internet
FSSO Agent
FortiGate
Internal Network
The FortiGate Cookbook 5.0.