Configuration name. Valid characters are A-Z, a-z, 0-9, _, and -. No spaces.

After you initially save the configuration, you cannot edit the name.

Enable to cache the credentials for the remote users (LDAP, RADIUS) once they are authorized.

Timeout for cached user credentials. The default is 300 seconds. The valid range is 1-86,400 seconds.

Timeout for query sent from FortiADC to a remote authentication server. The default is 2,000 milliseconds. The valid range is 1-60,000 milliseconds.

Specify one of the following logging options for authentication events:

• No logging
• Log failed attempts
• Log successful attempts
• Log all (both failed and successful attempts)

• HTML Form
• HTTP
• NTLM (only if you want to use NTLM server as a authentication server)

• Local—Default. No action is needed.
• SSO—Select to enable single sign-on (SSO) and then populate the fields below.

Select an authentication relay profile.

Specify the authentication session timeout. Valid values range from 1 to 180 minutes. The default is 3 (minutes).

Disabled by default. When enabled, you must specify the SSO domain. See below.

Note: Let's suppose that you add two or more virtual servers on FortiADC and they all use the same authentication relay, and then you set the Group Type (above) to SSO and enable SSO Support. When a client visits different services within the defined domain, only in the first request needs to be authenticated. Once authenticated, the client can visit all other services in the same domain.

Specify the SSO domain.