Creating the portal policy on FortiAuthenticator

1. On the FortiAuthenticator, go to Authentication > Portals > Policies, and create a new policy.
   Enter a name for the policy, select Allow captive portal access, and choose the previously configured FortiWLC Portal.
   
2. In Portal selection criteria, configure the following:
   1. Access points: Select the previously configured FortiAP access point.
   2. RADIUS clients: Select the previously configured FortiWLC RADIUS client.
      
3. In Authentication type, select Password/OTP authentication and Local/remote user.
4. In Identity sources, select the realm for which the user authentication is needed.
5. In Authentication factors, select Verify all configured authentication factors.
6. Review the RADIUS response and save your changes.