{"id":191,"date":"2022-04-05T17:55:39","date_gmt":"2022-04-05T21:55:39","guid":{"rendered":"https:\/\/opentextbc.ca\/fortigatefirewall\/chapter\/fsso\/"},"modified":"2023-08-29T16:27:01","modified_gmt":"2023-08-29T20:27:01","slug":"fsso","status":"publish","type":"chapter","link":"https:\/\/opentextbc.ca\/fortigatefirewall\/chapter\/fsso\/","title":{"raw":"5.2 FSSO","rendered":"5.2 FSSO"},"content":{"raw":"
\n

Learning Objectives<\/p>\n\n<\/header>\n

\n
    \n \t
  • Install FSSO Agent on Windows Server<\/li>\n \t
  • Configure a FSSO<\/li>\n<\/ul>\n<\/div>\n<\/div>\n
    Scenario<\/strong>: FSSO stands for Fortinet Single Sign-on and it is used to allow users to login into the network with one single login credential. In this scenario, we are going to focus on agent-based FSSO and we are going to install the agent on Windows Server. Then, anyone logins through Active Directory, we can track them through FortiGate Logs and Events.<\/div>\n
      \n \t
    1. In this scenario, we are going to join windows 10 to Active Directory that we have set already. The domain controller name is Hamid.local. First, we will join Windows 10 to the domain controller.\n\n[caption id=\"attachment_182\" align=\"aligncenter\" width=\"1004\"]\"Step Figure 5.11: Join Windows to the Active Directory[\/caption]\n\n[caption id=\"attachment_182\" align=\"aligncenter\" width=\"350\"]\"Step2- Figure 5.12: Enter Domain name[\/caption]\n\n[caption id=\"attachment_182\" align=\"aligncenter\" width=\"350\"]\"Step3- Figure 5.13: Enter username and password of AD administrator[\/caption]<\/li>\n \t
    2. Install FSSO Agent on the AD server.\n\n[caption id=\"attachment_185\" align=\"aligncenter\" width=\"400\"]\"Step1- Figure 5.14: Install FSSO Agent[\/caption]\n\n[caption id=\"attachment_185\" align=\"aligncenter\" width=\"400\"]\"Step2- Figure 5.15: Install FSSO Agent[\/caption]\n\nThe password you set here for the agent is going to be used in the FortiGate firewall when you want to connect to the FSSO Agent.\n\n[caption id=\"attachment_185\" align=\"aligncenter\" width=\"917\"]\"Configure Figure 5.16: Configure FSSO Agent[\/caption]<\/li>\n \t
    3. In the FortiGate firewall, go to Security Fabric<\/strong> > External Connectors<\/strong> > FSSO Agent on Windows AD<\/strong>.\n\n[caption id=\"attachment_188\" align=\"aligncenter\" width=\"1333\"]\"set Figure 5.17: Set external connectors[\/caption]\n\nEnter the same password you have set in step 2.\n\n[caption id=\"attachment_188\" align=\"aligncenter\" width=\"500\"]\"Set Figure 5.18: Set FSSO Agent settings[\/caption]\n\n[caption id=\"attachment_188\" align=\"aligncenter\" width=\"500\"]\"FSSO Figure 5.19: FSSO Agent status[\/caption]<\/li>\n \t
    4. You should be able to connect to FSSO Agent and you can verify the status of the external connector.<\/li>\n \t
    5. Verify your configuration by going to Log & Report > Events > User Events.<\/strong>\n\n[caption id=\"attachment_189\" align=\"alignnone\" width=\"1578\"]\"FSSO Figure 5.20: FSSO event logs[\/caption]<\/li>\n \t
    6. After connecting to the Agent, you should be able to see users and groups in AD when you are creating a new user.\n\n[caption id=\"attachment_190\" align=\"alignnone\" width=\"1272\"]\"After Figure 5.21: Verify configuration[\/caption]<\/li>\n<\/ol>","rendered":"
      \n
      \n

      Learning Objectives<\/p>\n<\/header>\n

      \n
        \n
      • Install FSSO Agent on Windows Server<\/li>\n
      • Configure a FSSO<\/li>\n<\/ul>\n<\/div>\n<\/div>\n
        Scenario<\/strong>: FSSO stands for Fortinet Single Sign-on and it is used to allow users to login into the network with one single login credential. In this scenario, we are going to focus on agent-based FSSO and we are going to install the agent on Windows Server. Then, anyone logins through Active Directory, we can track them through FortiGate Logs and Events.<\/div>\n
          \n
        1. In this scenario, we are going to join windows 10 to Active Directory that we have set already. The domain controller name is Hamid.local. First, we will join Windows 10 to the domain controller.
          \n
          \"Step
          Figure 5.11: Join Windows to the Active Directory<\/figcaption><\/figure>\n
          \"Step2-
          Figure 5.12: Enter Domain name<\/figcaption><\/figure>\n
          \"Step3-
          Figure 5.13: Enter username and password of AD administrator<\/figcaption><\/figure>\n<\/li>\n
        2. Install FSSO Agent on the AD server.
          \n
          \"Step1-
          Figure 5.14: Install FSSO Agent<\/figcaption><\/figure>\n
          \"Step2-
          Figure 5.15: Install FSSO Agent<\/figcaption><\/figure>\n

          The password you set here for the agent is going to be used in the FortiGate firewall when you want to connect to the FSSO Agent.<\/p>\n

          \"Configure
          Figure 5.16: Configure FSSO Agent<\/figcaption><\/figure>\n<\/li>\n
        3. In the FortiGate firewall, go to Security Fabric<\/strong> > External Connectors<\/strong> > FSSO Agent on Windows AD<\/strong>.
          \n
          \"set
          Figure 5.17: Set external connectors<\/figcaption><\/figure>\n

          Enter the same password you have set in step 2.<\/p>\n

          \"Set
          Figure 5.18: Set FSSO Agent settings<\/figcaption><\/figure>\n
          \"FSSO
          Figure 5.19: FSSO Agent status<\/figcaption><\/figure>\n<\/li>\n
        4. You should be able to connect to FSSO Agent and you can verify the status of the external connector.<\/li>\n
        5. Verify your configuration by going to Log & Report > Events > User Events.<\/strong>
          \n
          \"FSSO
          Figure 5.20: FSSO event logs<\/figcaption><\/figure>\n<\/li>\n
        6. After connecting to the Agent, you should be able to see users and groups in AD when you are creating a new user.
          \n
          \"After
          Figure 5.21: Verify configuration<\/figcaption><\/figure>\n<\/li>\n<\/ol>\n","protected":false},"author":124,"menu_order":3,"template":"","meta":{"pb_show_title":"on","pb_short_title":"","pb_subtitle":"","pb_authors":[],"pb_section_license":""},"chapter-type":[],"contributor":[],"license":[],"class_list":["post-191","chapter","type-chapter","status-publish","hentry"],"part":167,"_links":{"self":[{"href":"https:\/\/opentextbc.ca\/fortigatefirewall\/wp-json\/pressbooks\/v2\/chapters\/191","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/opentextbc.ca\/fortigatefirewall\/wp-json\/pressbooks\/v2\/chapters"}],"about":[{"href":"https:\/\/opentextbc.ca\/fortigatefirewall\/wp-json\/wp\/v2\/types\/chapter"}],"author":[{"embeddable":true,"href":"https:\/\/opentextbc.ca\/fortigatefirewall\/wp-json\/wp\/v2\/users\/124"}],"version-history":[{"count":1,"href":"https:\/\/opentextbc.ca\/fortigatefirewall\/wp-json\/pressbooks\/v2\/chapters\/191\/revisions"}],"predecessor-version":[{"id":192,"href":"https:\/\/opentextbc.ca\/fortigatefirewall\/wp-json\/pressbooks\/v2\/chapters\/191\/revisions\/192"}],"part":[{"href":"https:\/\/opentextbc.ca\/fortigatefirewall\/wp-json\/pressbooks\/v2\/parts\/167"}],"metadata":[{"href":"https:\/\/opentextbc.ca\/fortigatefirewall\/wp-json\/pressbooks\/v2\/chapters\/191\/metadata\/"}],"wp:attachment":[{"href":"https:\/\/opentextbc.ca\/fortigatefirewall\/wp-json\/wp\/v2\/media?parent=191"}],"wp:term":[{"taxonomy":"chapter-type","embeddable":true,"href":"https:\/\/opentextbc.ca\/fortigatefirewall\/wp-json\/pressbooks\/v2\/chapter-type?post=191"},{"taxonomy":"contributor","embeddable":true,"href":"https:\/\/opentextbc.ca\/fortigatefirewall\/wp-json\/wp\/v2\/contributor?post=191"},{"taxonomy":"license","embeddable":true,"href":"https:\/\/opentextbc.ca\/fortigatefirewall\/wp-json\/wp\/v2\/license?post=191"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}