Which two configurations are compatible for Wireless Single Sign-On (WSSO)? (Choose two.)

Which two configurations are compatible for Wireless Single Sign-On (WSSO)? (Choose two.)
A . A VAP configured for captive portal authentication
B . A VAP configured for WPA2 or 3 Enterprise
C . A VAP configured to authenticate locally on FortiGate
D . A VAP configured to authenticate using a radius server

View Answer

Answer: B, D

Explanation:

In the SSID choose WPA2-Enterprise authentication.

WSSO is RADIUS-based authentication that passes the user’s user group memberships to the FortiGate.

Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/b92a67f9-73a6-11ea-9384-00505692583a/FortiWiFi_and_FortiAP-6.4.2-Configuration_Guide.pdf Wireless Single Sign-On (WSSO) is a RADIUS-based authentication method that passes the user’s user group memberships to the FortiGate for policy enforcement. WSSO can be configured for a VAP that uses WPA2 or WPA3 Enterprise authentication, which requires users to enter their credentials when connecting to the wireless network. WSSO can also be configured for a VAP that authenticates users using a RADIUS server, which returns the user group information in the Fortinet-Group-Name attribute.

Reference: FortiOS 6.4.0 Handbook – Wireless Controller, page 57; FortiOS 6.4.0 Handbook

– Authentication, page 59.