Defining local user groups for RADIUS SSO
You cannot use RADIUS user groups directly in security policies. Instead, you create locally-defined user groups on the FortiGate unit and associate each of them with a RADIUS user group.
To define local user groups for RADIUS SSO
1. Go to User & Device > User > User Groups and select Create New.
2. Enter a Name for the user group.
3. In Type, select RADIUS Single Sign-On (RSSO).
4. In RADIUS Attribute Value, enter the name of the RADIUS user group this local user group represents.
5. Select OK.
To define local user groups for RADIUS SSO
This example creates an RSSO user group called RSSO-1 that is associated with RADIUS user group “student”.
config user group
edit RSSO-1
set group-type rsso
set sso-attribute-value student
end