Chapter 3 Authentication for FortiOS 5.0 : Agent-based FSSO : Troubleshooting FSSO : Guest users do not have access to network : Solution
  
Solution
The group of the guest users was not included in a policy, so they do not fall under the guest account. To give them access, associate their group with a security policy.
Additionally, there is a default group called FSSO_Guest_Users. Ensure that group is part of an identity-based security policy to allow traffic.