Providing Single Sign-On For Windows Ad With Ldap - Fortinet FortiGate 1U Quick Start Manual

Providing Single Sign-On for Windows AD with
LDAP
A logged-on Windows user can be automatically authenticated on a FortiGate unit
through Fortinet Single Sign-On. Some Windows AD systems use an external LDAP
server. FSSO can also accommodate this configuration.
1. Configuring access to the LDAP server
2. Configuring the DC agent as an FSSO agent
3. Configuring a group filter on the FSSO agent
4. Creating an FSSO user group and adding AD user groups
5. Creating a security policy to allow the FSSO user group access
6. Results
WAN 1
FortiGate

Providing Single Sign-On for Windows AD with LDAP

Internet
LDAP Server
192.168.1. 117
Port 1
Windows AD
Domain Controller
192.168.1.114
Internal Network
FSSO Agent
169