Fortinet FortiGate 1U Quick Start Manual page 187

Configuring the DC agent
for Advanced mode
Log on to the Windows server where the DC
agent is installed. Go to All Programs >
FortiNet > Fortinet Single Sign On Agent
> Configure Fortinet Single Sign On
Agent.
Select Directory Access Information and
set AD Access mode to Advanced.
The rest of the configuration is done on the
FortiGate unit.
Configuring the FSSO agent
Go to User & Device > Authentication >
Single Sign-On to enter the information the
FortiGate unit needs to access the DC agent.
After you select Apply & Refresh, the
Windows AD groups are listed. This confirms
that the FortiGate unit can communicate with
the DC agent.
On a Windows AD network with a large
number of groups, the FortiGate unit's
performance might be affected by the
volume of user logon information it
receives. Use the Set Group Filters
function of the DC agent to send
information only for the groups you intend
to authenticate.
Providing Single Sign-On in advanced mode for a Windows AD network 167