Configure RADIUS settings on FortiAuthenticator

To create a RADIUS service policy:

1. Go to Authentication > RADIUS Service > Policies, and click Create New.
2. Under RADIUS clients, set the following and then click Next:
   1. Policy Name: Enter a name for the policy, for example EAP-TLS Policy G Suite.
   2. Description: Enter an optional description, for example EAP-TLS Policy for User Authentication.
   3. RADIUS Clients: Add the FortiGate to the Chosen RADIUS Clients section.
      
3. Under RADIUS attribute criteria, click Next without making changes.
4. Under Authentication type, select Client Certificates (EAP-TLS), and click Next.
   
5. Under Identity source, set the following and then click Next:
   1. Username format: Select your preferred format, for example username@realm.
   2. Realms: Select the realm that you set up to communicate with ldap.google.com, for example fortixpert.com.
      
6. Under Authentication factors, click Next without making changes.
7. Under RADIUS response, validate that the EAP-TLS response is as expected, and click Save and exit.