Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • CLI Reference

    6.2.6
    7.6.0
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.10
    7.2.9
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.16
    7.0.15
    7.0.14
    7.0.13
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    7.0.6
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.15
    6.4.14
    6.4.13
    6.4.12
    6.4.11
    6.4.10
    6.4.9
    6.4.8
    6.4.7
    6.4.6
    6.4.5
    6.4.4
    6.4.3
    6.4.2
    6.4.1
    6.4.0
    6.2.16
    6.2.15
    6.2.14
    6.2.13
    6.2.12
    6.2.11
    6.2.10
    6.2.9
    6.2.8
    6.2.7
    6.2.6
    6.2.5
    6.2.4
    6.2.3
    6.2.2
    6.2.1
    6.0.0
    5.6.0
    5.4.0
    5.2.0
    5.0.0

    user fsso

    Configure Fortinet Single Sign On (FSSO) agents.

      config user fsso
      Description: Configure Fortinet Single Sign On (FSSO) agents.
      edit <name>
          set type [default|fortiems|...]
          set server {string}
          set port {integer}
          set password {password}
          set server2 {string}
          set port2 {integer}
          set password2 {password}
          set server3 {string}
          set port3 {integer}
          set password3 {password}
          set server4 {string}
          set port4 {integer}
          set password4 {password}
          set server5 {string}
          set port5 {integer}
          set password5 {password}
          set ldap-server {string}
          set group-poll-interval {integer}
          set ldap-poll [enable|disable]
          set ldap-poll-interval {integer}
          set ldap-poll-filter {string}
          set user-info-server {string}
          set ssl [enable|disable]
          set ssl-trusted-cert {string}
          set source-ip {ipv4-address}
          set source-ip6 {ipv6-address}
          set interface-select-method [auto|sdwan|...]
          set interface {string}
      next
  end

    config user fsso

    Parameter Name Description Type Size
    type Server type.
    default: All other unspecified types of servers.
    fortiems: FortiClient EMS server.
    fortinac: FortiNAC server.
    fortiems-cloud: FortiClient EMS Cloud server.
    		 option -
    server Domain name or IP address of the first FSSO collector agent. string Maximum length: 63
    port Port of the first FSSO collector agent. integer Minimum value: 1 Maximum value: 65535
    password Password of the first FSSO collector agent. password Not Specified
    server2 Domain name or IP address of the second FSSO collector agent. string Maximum length: 63
    port2 Port of the second FSSO collector agent. integer Minimum value: 1 Maximum value: 65535
    password2 Password of the second FSSO collector agent. password Not Specified
    server3 Domain name or IP address of the third FSSO collector agent. string Maximum length: 63
    port3 Port of the third FSSO collector agent. integer Minimum value: 1 Maximum value: 65535
    password3 Password of the third FSSO collector agent. password Not Specified
    server4 Domain name or IP address of the fourth FSSO collector agent. string Maximum length: 63
    port4 Port of the fourth FSSO collector agent. integer Minimum value: 1 Maximum value: 65535
    password4 Password of the fourth FSSO collector agent. password Not Specified
    server5 Domain name or IP address of the fifth FSSO collector agent. string Maximum length: 63
    port5 Port of the fifth FSSO collector agent. integer Minimum value: 1 Maximum value: 65535
    password5 Password of the fifth FSSO collector agent. password Not Specified
    ldap-server LDAP server to get group information. string Maximum length: 35
    group-poll-interval Interval in minutes within to fetch groups from FSSO server, or unset to disable. integer Minimum value: 1 Maximum value: 2880
    ldap-poll Enable/disable automatic fetching of groups from LDAP server.
    enable: Enable automatic fetching of groups from LDAP server.
    disable: Disable automatic fetching of groups from LDAP server.
    		 option -
    ldap-poll-interval Interval in minutes within to fetch groups from LDAP server. integer Minimum value: 1 Maximum value: 2880
    ldap-poll-filter Filter used to fetch groups. string Maximum length: 2047
    user-info-server LDAP server to get user information. string Maximum length: 35
    ssl Enable/disable use of SSL.
    enable: Enable use of SSL.
    disable: Disable use of SSL.
    		 option -
    ssl-trusted-cert Trusted server certificate or CA certificate. string Maximum length: 79
    source-ip Source IP for communications to FSSO agent. ipv4-address Not Specified
    source-ip6 IPv6 source for communications to FSSO agent. ipv6-address Not Specified
    interface-select-method Specify how to select outgoing interface to reach server.
    auto: Set outgoing interface automatically.
    sdwan: Set outgoing interface by SD-WAN or policy routing rules.
    specify: Set outgoing interface manually.
    		 option -
    interface Specify outgoing interface to reach server. string Maximum length: 15
    Previous
    Next

    user fsso

    Configure Fortinet Single Sign On (FSSO) agents.

      config user fsso
      Description: Configure Fortinet Single Sign On (FSSO) agents.
      edit <name>
          set type [default|fortiems|...]
          set server {string}
          set port {integer}
          set password {password}
          set server2 {string}
          set port2 {integer}
          set password2 {password}
          set server3 {string}
          set port3 {integer}
          set password3 {password}
          set server4 {string}
          set port4 {integer}
          set password4 {password}
          set server5 {string}
          set port5 {integer}
          set password5 {password}
          set ldap-server {string}
          set group-poll-interval {integer}
          set ldap-poll [enable|disable]
          set ldap-poll-interval {integer}
          set ldap-poll-filter {string}
          set user-info-server {string}
          set ssl [enable|disable]
          set ssl-trusted-cert {string}
          set source-ip {ipv4-address}
          set source-ip6 {ipv6-address}
          set interface-select-method [auto|sdwan|...]
          set interface {string}
      next
  end

    config user fsso

    Parameter Name Description Type Size
    type Server type.
    default: All other unspecified types of servers.
    fortiems: FortiClient EMS server.
    fortinac: FortiNAC server.
    fortiems-cloud: FortiClient EMS Cloud server.
    		 option -
    server Domain name or IP address of the first FSSO collector agent. string Maximum length: 63
    port Port of the first FSSO collector agent. integer Minimum value: 1 Maximum value: 65535
    password Password of the first FSSO collector agent. password Not Specified
    server2 Domain name or IP address of the second FSSO collector agent. string Maximum length: 63
    port2 Port of the second FSSO collector agent. integer Minimum value: 1 Maximum value: 65535
    password2 Password of the second FSSO collector agent. password Not Specified
    server3 Domain name or IP address of the third FSSO collector agent. string Maximum length: 63
    port3 Port of the third FSSO collector agent. integer Minimum value: 1 Maximum value: 65535
    password3 Password of the third FSSO collector agent. password Not Specified
    server4 Domain name or IP address of the fourth FSSO collector agent. string Maximum length: 63
    port4 Port of the fourth FSSO collector agent. integer Minimum value: 1 Maximum value: 65535
    password4 Password of the fourth FSSO collector agent. password Not Specified
    server5 Domain name or IP address of the fifth FSSO collector agent. string Maximum length: 63
    port5 Port of the fifth FSSO collector agent. integer Minimum value: 1 Maximum value: 65535
    password5 Password of the fifth FSSO collector agent. password Not Specified
    ldap-server LDAP server to get group information. string Maximum length: 35
    group-poll-interval Interval in minutes within to fetch groups from FSSO server, or unset to disable. integer Minimum value: 1 Maximum value: 2880
    ldap-poll Enable/disable automatic fetching of groups from LDAP server.
    enable: Enable automatic fetching of groups from LDAP server.
    disable: Disable automatic fetching of groups from LDAP server.
    		 option -
    ldap-poll-interval Interval in minutes within to fetch groups from LDAP server. integer Minimum value: 1 Maximum value: 2880
    ldap-poll-filter Filter used to fetch groups. string Maximum length: 2047
    user-info-server LDAP server to get user information. string Maximum length: 35
    ssl Enable/disable use of SSL.
    enable: Enable use of SSL.
    disable: Disable use of SSL.
    		 option -
    ssl-trusted-cert Trusted server certificate or CA certificate. string Maximum length: 79
    source-ip Source IP for communications to FSSO agent. ipv4-address Not Specified
    source-ip6 IPv6 source for communications to FSSO agent. ipv6-address Not Specified
    interface-select-method Specify how to select outgoing interface to reach server.
    auto: Set outgoing interface automatically.
    sdwan: Set outgoing interface by SD-WAN or policy routing rules.
    specify: Set outgoing interface manually.
    		 option -
    interface Specify outgoing interface to reach server. string Maximum length: 15
    Previous
    Next