Chapter 4 Authentication : Agent-based FSSO : Configuring FSSO on FortiGate units
  
Configuring FSSO on FortiGate units
To configure your FortiGate unit to operate with agent-based FSSO, you
Configure any access to LDAP servers that might be necessary. Skip this step if you are using FSSO Standard mode. See “Configuring LDAP server access”.
Specify the Collector agent or Novell eDirectory agent that will provide user logon information. See “Specifying your Collector agents or Novell eDirectory agents”.
Add Active Directory user groups to FortiGate user groups. See “Creating Fortinet Single Sign-On (FSSO) user groups”.
Create security policies for FSSO-authenticated groups. See “Creating security policies”.
Optionally, specify a guest security policy to allow guest access. See “Enabling guest access through FSSO security policies”.