LDAP & FortiAuthenticator

[BlakeRichardson]

Hi Everyone

Just wondering is anyone using JC LDAP directory with a Fortinet FortiAuthenticator? I have got JC LDAP working with a Fortigate but the configuration for the FortiAuthenticator is very different. 

I can get users to sync / auth but its not picking up the group memberships. 

[BenGarrison]

I was going to take the screenshot on the documentation and fill in the fields. But I noticed there isn't a place for LDAP Bind DN information. Is there a place to include BindDN username/password?  We do not support anonymous queries.

[BlakeRichardson]

Hi, I was able to get it working after some tinkering and contacting Fortinet support. @BenGarrison yes its using a bind account for authentication. 

Thanks

[BenGarrison]

Interested in learning the steps you had to take! We will be creating a community knowledgebase that address these generic SAML connections and other integrations that aren't in our support site.

[archery1998]

Hi Ben, Any idea when this is going to happen? I'm trying to set up a SAML connector now with my fortigate to handle VPN SSO auth but am having some issues with the article that I was able to find.

[BrightRodger]

Hello there @archery1998, we have a fairly comprehensive blog post about configuring your FortiGate to utilize JumpCloud's SAML based SSO functionality. Just wanted to make sure you have seen it and gone through this post, it might handle the specific issues you are running into.

https://jumpcloud.com/blog/supercharge-fortinet-vpn-security-with-mfa-sso-and-conditional-access