Chapter 3 Authentication for FortiOS 5.0 : Authentication servers
  
Authentication servers
FortiGate units support the use of external authentication servers. An authentication server can provide password checking for selected FortiGate users or it can be added as a member of a FortiGate user group.
If you are going to use authentication servers, you must configure the servers before you configure FortiGate users or user groups that require them.
 
MAC OS and iOS devices, including iPhones and iPads, can perform user authentication with FortiOS units using RADIUS servers, but not with LDAP or TACACS+ servers.
This section includes the following topics:
FortiAuthenticator servers
RADIUS servers
LDAP servers
TACACS+ servers
SSO servers
RSA ACE (SecurID) servers