To configure LDAP for FSSO – CLI example:

config user ldap edit LDAP

set server 10.10.20.3 set cnid sAMAccountName

set dn dc=techdoc,dc=local set type regular

set username administrator@techdoc.local set password <your_password>

next end

Configuring the LDAP Server as a Single Sign-On server

The LDAP server must be added to the FortiGate Single Sign-On configuration.

To add the LDAP server as a Single Sign-On server:

1. Go to User & Device > Authentication > Single Sign-On and select Create New.

2. Enter

Type                                            Poll Active Directory Server

Server IP/Name                          Server Name or IP address of the Domain Controller

User                                            A Domain user name

Password                                   The user’s password

LDAP Server                              Select the LDAP server you added earlier.

Enable Polling                           Select

3. Select OK.