config user fsso

Configure Fortinet Single Sign On (FSSO) agents.

config user fsso

Description: Configure Fortinet Single Sign On (FSSO) agents.

edit <name>

set type [default|fortiems|...]

set server {string}

set port {integer}

set password {password}

set server2 {string}

set port2 {integer}

set password2 {password}

set server3 {string}

set port3 {integer}

set password3 {password}

set server4 {string}

set port4 {integer}

set password4 {password}

set server5 {string}

set port5 {integer}

set password5 {password}

set ldap-server {string}

set group-poll-interval {integer}

set ldap-poll [enable|disable]

set ldap-poll-interval {integer}

set ldap-poll-filter {string}

set user-info-server {string}

set ssl [enable|disable]

set ssl-trusted-cert {string}

set source-ip {ipv4-address}

set source-ip6 {ipv6-address}

set interface-select-method [auto|sdwan|...]

set interface {string}

next

end

config user fsso

Parameter	Description	Type	Size
type	Server type.	option	-
	Option Description default All other unspecified types of servers. fortiems FortiClient EMS server. fortinac FortiNAC server. fortiems-cloud FortiClient EMS Cloud server.
server	Domain name or IP address of the first FSSO collector agent.	string	Not Specified
port	Port of the first FSSO collector agent.	integer	Minimum value: 1 Maximum value: 65535
password	Password of the first FSSO collector agent.	password	Not Specified
server2	Domain name or IP address of the second FSSO collector agent.	string	Not Specified
port2	Port of the second FSSO collector agent.	integer	Minimum value: 1 Maximum value: 65535
password2	Password of the second FSSO collector agent.	password	Not Specified
server3	Domain name or IP address of the third FSSO collector agent.	string	Not Specified
port3	Port of the third FSSO collector agent.	integer	Minimum value: 1 Maximum value: 65535
password3	Password of the third FSSO collector agent.	password	Not Specified
server4	Domain name or IP address of the fourth FSSO collector agent.	string	Not Specified
port4	Port of the fourth FSSO collector agent.	integer	Minimum value: 1 Maximum value: 65535
password4	Password of the fourth FSSO collector agent.	password	Not Specified
server5	Domain name or IP address of the fifth FSSO collector agent.	string	Not Specified
port5	Port of the fifth FSSO collector agent.	integer	Minimum value: 1 Maximum value: 65535
password5	Password of the fifth FSSO collector agent.	password	Not Specified
ldap-server	LDAP server to get group information.	string	Not Specified
group-poll-interval	Interval in minutes within to fetch groups from FSSO server, or unset to disable.	integer	Minimum value: 1 Maximum value: 2880
ldap-poll	Enable/disable automatic fetching of groups from LDAP server.	option	-
	Option Description enable Enable automatic fetching of groups from LDAP server. disable Disable automatic fetching of groups from LDAP server.
ldap-poll-interval	Interval in minutes within to fetch groups from LDAP server.	integer	Minimum value: 1 Maximum value: 2880
ldap-poll-filter	Filter used to fetch groups.	string	Not Specified
user-info-server	LDAP server to get user information.	string	Not Specified
ssl	Enable/disable use of SSL.	option	-
	Option Description enable Enable use of SSL. disable Disable use of SSL.
ssl-trusted-cert	Trusted server certificate or CA certificate.	string	Not Specified
source-ip	Source IP for communications to FSSO agent.	ipv4-address	Not Specified
source-ip6	IPv6 source for communications to FSSO agent.	ipv6-address	Not Specified
interface-select-method	Specify how to select outgoing interface to reach server.	option	-
	Option Description auto Set outgoing interface automatically. sdwan Set outgoing interface by SD-WAN or policy routing rules. specify Set outgoing interface manually.
interface	Specify outgoing interface to reach server.	string	Not Specified