ºÚÁϺ£½Ç91Èë¿Ú

This article covers configuration of Fortigate devices for use with ºÚÁϺ£½Ç91Èë¿Ú’s LDAP Servers. Once configured, users connecting through your Fortigate VPN or networking device can authenticate via LDAP with their ºÚÁϺ£½Ç91Èë¿Ú credentials.

Configuring the LDAP Server

To configure your Fortigate networking device to authenticate against ºÚÁϺ£½Ç91Èë¿Ú’s LDAP Servers:

1. Log in to your Fortigate Admin Panel with your Administrator credentials.
2. In the left menu, navigate to User & Authentication > LDAP Servers > Edit LDAP Server.
3. Enter the following settings:
   • Name: ºÚÁϺ£½Ç91Èë¿Ú LDAP
   • Server IP/Name: ldap.jumpcloud.com
   • Server Port: 636
   • Common Name Identifier: uid
   • Distinguished Name: o=INSERT_ORG_ID_HERE,dc=jumpcloud,dc=com
   • Bind Type: select Regular
   • Username: INSERT_LDAP_BIND_DN_HERE (This would be like uid=ldapadmin,ou=Users,o=ORGID,dc=jumpcloud,dc=com)
   • Password: LDAP_BIND_DN_PASSWORD
   • Enable Secure Connection.
   • Protocol: select LDAPS
   • Certificate: Browse to and upload the Go_Daddy_Class_2_CA outlined in this LDAP article.
     

3. Click Test Connectivity and ensure that the status is Successful.

4. After the test is successful, click OK.
5. You can now move on to configuring the permissions and ACLs within Fortigate to allow for User Authentication.

Implementing LDAP Group Membership

To query ºÚÁϺ£½Ç91Èë¿Ú User Groups via LDAP, use the following Fortigate CLI commands to modify the LDAP server configuration. This lets you manage access using ºÚÁϺ£½Ç91Èë¿Ú User Groups associated with the LDAP server. See Creating an LDAP Group.