Create the self-service portal policy

To create a self-service portal policy:

1. Go to Authentication > Portals > Policies. Select the Self-Service Portal option, and click Create New.
2. Under Policy Type, set the following and then click Next.
   1. Name: Enter a policy name, for example SmartConnect.
   2. Description: Enter an optional description for the policy.
   3. URL: Note this URL. This is the external captive portal redirection URL which must be added to the Onboarding SSID configured on the FortiGate/WLC later.
   4. Portal: Select the previously configured Smart Connect portal.
      
3. Under Identity sources, set the following and then click Next:
   1. Username format: username@realm.
   2. Realms: In the dropdown box, select the LDAP realm associated with Azure, for example fortixpert.com.
      
4. Under Authentication factors, leave the default options in place, and click Save and exit.