Fortinet FortiGate 1U Quick Start Manual page 191

Configuring a group filter
on the FSSO agent
Log on to the Windows server where the DC
agent is installed. Go to All Programs >
FortiNet > Fortinet Single Sign On Agent
> Configure Fortinet Single Sign On
Agent.
Select Set Group Filters. Select Add. Enter
the FortiGate unit serial number and specify
which user groups the DC agent should
monitor for the FortiGate unit. Select Add
again.
To avoid adversely affecting the FortiGate
unit's performance, configure the filter to
send information only for the groups you
intend to authenticate.
Creating an FSSO user
group and adding AD user
groups
.Go to User & Device > User > User
Groups. Create a Fortinet Single Sign-On
group and select which Windows AD groups
to include as members.
Providing Single Sign-On for Windows AD with LDAP 171