Chapter 3 Authentication for FortiOS 5.0 : Single Sign-On to Windows AD : Troubleshooting FSSO : Guest users do not have access to network : Solution
  
Solution
The group of the guest users was not included in a policy, so they do not fall under the guest account. To give them access, associate their group with a security policy.
Additionally, there is a default group called FSSO_Guest_Users. Ensure that group is part of an identity-based security policy to allow traffic.