OpenRSSO Open Source Server Single Sign-On (SSO) For FortiGate - Part1

Download: https://drive.google.com/file/d/16F0upHRdMqHcfwdgm4x7q4SfUaOrvnwx/view?usp=sharing

I’ve developed OpenRSSO, a lightweight polling-based Single Sign-On (SSO) server designed to dynamically provide user-to-IP mapping for network security devices such as FortiGate.

OpenRSSO integrates with Windows Active Directory to retrieve user group memberships, stores session state in PostgreSQL, and uses RADIUS Accounting to synchronize real-time user and group information with the firewall.
As long as a client sends periodic heartbeats, the user remains mapped as online; once heartbeats stop, the session is automatically marked offline and immediately removed from the FortiGate.

The solution is fully containerized with Docker, exposed via Traefik, and secured using API keys, making it suitable for lab environments, security testing, and custom SSO scenarios where traditional FSSO is not available or flexible enough.

👉 In the next videos, we will continue this project by developing a Windows client that automatically sends heartbeat requests to OpenRSSO based on the logged-in AD user.

Stay tuned.

Видео OpenRSSO Open Source Server Single Sign-On (SSO) For FortiGate - Part1 канала Kamran Shalbuzov