user : Configuring users for authentication : Configuring users for password authentication
 
Configuring users for password authentication
You need to set up authentication in the following order:
1. If external authentication is needed, configure the required servers.
See user radius.
See user ldap.
See user tacacs+
For Directory Service, see user fsso.
2. Configure local user identities.
For each user, you can choose whether the FortiGate unit or an external authentication server verifies the password.
See user local.
3. Create user groups.
Add local users to each user group as appropriate. You can also add an authentication server to a user group. In this case, all users in the server’s database can authenticate to the FortiGate unit.
See user group.
For Directory Service, also see user ban.