Solved: How do I detect all the groups of the captive portal user once it is authenticated?

This article describes how FortiGate can detect all the groups of the captive portal user once it is authenticated.

Solution

Step 1: Test user is ‘test1’.

Step 2: Make sure that the ‘test1’ user is part of ‘group1’ and ‘group2’.

Step 3: Captive portal is enabled on the interface port2 where the captive portal user is behind of. ‘group1’ and ‘group2’ have been added under user restricted groups which are the groups that ‘test1’ user is part of.

Step 4: With this configuration. once ‘test1’ user authenticates via captive portal, the FortiGate will detect all the groups that the ‘test1’ captive portal user belongs to.

Step 5: It is possible to check it as well via cli by running this command # diag firewall auth list.