Chapter 3 Authentication for FortiOS 5.0 : SSO using a FortiAuthenticator unit : Configuring the FortiGate unit : Configuring an FSSO user group
  
Configuring an FSSO user group
You cannot use FortiAuthenticator SSO user groups directly in a security policy. Create an FSSO user group and add FortiAuthenticator SSO user groups to it. FortiGate FSSO user groups are available for selection in identity-based security policies.
To create an FSSO user group
1. Go to User & Device > User > User Groups and select Create New.
2. Enter a Name for the group.
3. In Type, select Fortinet Single Sign-On (FSSO).
4. Add Available Members to the Members list.
The Available Members are SSO groups provided by SSO agents.
5. Select OK.