Chapter 3 Authentication for FortiOS 5.0 : Agent-based FSSO : Configuring the FSSO eDirectory agent for Novell eDirectory : Configuring a group filter
  
Configuring a group filter
The eDirectory agent sends user logon information to the FortiGate unit for all user groups unless you either configure an LDAP server entry for the eDirectory on the FortiGate unit and select the groups that you want to monitor or configure the group filter on the eDirectory agent.
If both the FortiGate LDAP configuration and the eDirectory agent group filter are present, the FortiGate user group selections are used.
To configure the group filter
1. From the Start menu select Programs > Fortinet > eDirectory Agent > eDirectory Config Utility.
2. Select Set Group Filters.
3. Do one of the following:
Enter group names, then select Add.
Select Advanced, select groups, and then select Add.
4. Select OK.