Chapter 16 SSL VPN for FortiOS 5.0 : Basic Configuration : User accounts and groups : Authentication of remote users
  
Authentication of remote users
When remote users connect to the SSL VPN tunnel, they must perform authentication before being able to use the internal network resources. This can be as simple as assigning users with their own passwords, connecting to an LDAP server or using more secure options. FortiOS provides a number of options for authentication as well as security option for those connected users.
The web portal can include bookmarks to connect to internal network resources. A web (HTTP/HTTPS) bookmark can include login credentials so that the FortiGate unit automatically logs the user into the web site. This means that the user logs into the SSL VPN and then does not have to enter any more credentials to visit preconfigured web sites.
Both the administrator and the end user can configure bookmarks, including SSO bookmarks. To add bookmarks as a web portal user, see “Adding bookmarks”.
See Also
Setting the client authentication timeout
Allow one time login per user
Strong authentication with security certificates