Fine-grained controls

The Fine-grained Controls menu provides options to include or exclude a user or group from SSO, and set the maximum number of concurrent sessions that a user or group can have.

To adjust the controls, go to Fortinet SSO Methods > SSO > Fine-grained Controls.

The following options are available:

Clear Configuration	Clear the SSO configuration for the selected users or groups.
Include in SSO	Select a user or users, then select Include in SSO to include the selected users in SSO.
SSO Type	Select the SSO type to view from the dropdown menu. The options are: Local Users, Local Groups, SSO Users, and SSO Groups.
SSO Name	The users’ or groups’ names. Select the column title to sort the list by this column.
Maximum Concurrent Sessions	The maximum concurrent sessions allowed for the user or group. This number cannot be greater than five.
Excluded from SSO	If the user or group is excluded from SSO, a red circle with a line is displayed.

To edit an SSO user or group:

1. In the Fine-grained Controls window, click the SSO user or group to edit.
   The Edit SSO Fine-grained Control Item window opens.
2. Enter the maximum number of concurrent SSO logon sessions per user that the user or group is allowed to have. Enter 0 for unlimited. The value must be less than or equal to five.
3. Select OK to apply the changes.