config user fsso
Configure Fortinet Single Sign On (FSSO) agents.
config user fsso Description: Configure Fortinet Single Sign On (FSSO) agents. edit <name> set type [default|fortinac] set server {string} set port {integer} set password {password} set server2 {string} set port2 {integer} set password2 {password} set server3 {string} set port3 {integer} set password3 {password} set server4 {string} set port4 {integer} set password4 {password} set server5 {string} set port5 {integer} set password5 {password} set logon-timeout {integer} set ldap-server {string} set group-poll-interval {integer} set ldap-poll [enable|disable] set ldap-poll-interval {integer} set ldap-poll-filter {string} set user-info-server {string} set ssl [enable|disable] set ssl-server-host-ip-check [enable|disable] set ssl-trusted-cert {string} set source-ip {ipv4-address} set source-ip6 {ipv6-address} set interface-select-method [auto|sdwan|...] set interface {string} next end
config user fsso
Parameter |
Description |
Type |
Size |
Default |
||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|
name |
Name. |
string |
Maximum length: 35 |
|
||||||||
type |
Server type. |
option |
- |
default |
||||||||
|
|
|||||||||||
server |
Domain name or IP address of the first FSSO collector agent. |
string |
Maximum length: 63 |
|
||||||||
port |
Port of the first FSSO collector agent. |
integer |
Minimum value: 1 Maximum value: 65535 |
8000 |
||||||||
password |
Password of the first FSSO collector agent. |
password |
Not Specified |
|
||||||||
server2 |
Domain name or IP address of the second FSSO collector agent. |
string |
Maximum length: 63 |
|
||||||||
port2 |
Port of the second FSSO collector agent. |
integer |
Minimum value: 1 Maximum value: 65535 |
8000 |
||||||||
password2 |
Password of the second FSSO collector agent. |
password |
Not Specified |
|
||||||||
server3 |
Domain name or IP address of the third FSSO collector agent. |
string |
Maximum length: 63 |
|
||||||||
port3 |
Port of the third FSSO collector agent. |
integer |
Minimum value: 1 Maximum value: 65535 |
8000 |
||||||||
password3 |
Password of the third FSSO collector agent. |
password |
Not Specified |
|
||||||||
server4 |
Domain name or IP address of the fourth FSSO collector agent. |
string |
Maximum length: 63 |
|
||||||||
port4 |
Port of the fourth FSSO collector agent. |
integer |
Minimum value: 1 Maximum value: 65535 |
8000 |
||||||||
password4 |
Password of the fourth FSSO collector agent. |
password |
Not Specified |
|
||||||||
server5 |
Domain name or IP address of the fifth FSSO collector agent. |
string |
Maximum length: 63 |
|
||||||||
port5 |
Port of the fifth FSSO collector agent. |
integer |
Minimum value: 1 Maximum value: 65535 |
8000 |
||||||||
password5 |
Password of the fifth FSSO collector agent. |
password |
Not Specified |
|
||||||||
logon-timeout |
Interval in minutes to keep logons after FSSO server down. |
integer |
Minimum value: 1 Maximum value: 2880 |
5 |
||||||||
ldap-server |
LDAP server to get group information. |
string |
Maximum length: 35 |
|
||||||||
group-poll-interval |
Interval in minutes within to fetch groups from FSSO server, or unset to disable. |
integer |
Minimum value: 1 Maximum value: 2880 |
0 |
||||||||
ldap-poll |
Enable/disable automatic fetching of groups from LDAP server. |
option |
- |
disable |
||||||||
|
|
|||||||||||
ldap-poll-interval |
Interval in minutes within to fetch groups from LDAP server. |
integer |
Minimum value: 1 Maximum value: 2880 |
180 |
||||||||
ldap-poll-filter |
Filter used to fetch groups. |
string |
Maximum length: 2047 |
(objectCategory=group) |
||||||||
user-info-server |
LDAP server to get user information. |
string |
Maximum length: 35 |
|
||||||||
ssl |
Enable/disable use of SSL. |
option |
- |
disable |
||||||||
|
|
|||||||||||
ssl-server-host-ip-check |
Enable/disable server host/IP verification. |
option |
- |
disable |
||||||||
|
|
|||||||||||
ssl-trusted-cert |
Trusted server certificate or CA certificate. |
string |
Maximum length: 79 |
|
||||||||
source-ip |
Source IP for communications to FSSO agent. |
ipv4-address |
Not Specified |
0.0.0.0 |
||||||||
source-ip6 |
IPv6 source for communications to FSSO agent. |
ipv6-address |
Not Specified |
:: |
||||||||
interface-select-method |
Specify how to select outgoing interface to reach server. |
option |
- |
auto |
||||||||
|
|
|||||||||||
interface |
Specify outgoing interface to reach server. |
string |
Maximum length: 15 |
|