OAuth2 roles

Click View OAuth Roles in the Authentication tab to configure the mapping between FortiPortal profiles and OAuth2 roles.

For each role mapping, the window displays the Role Name, Role Type (Service Provider or Customer) and a list of FPC (FortiPortal) roles that map to the OAuth2 role.

In previous versions, profiles were referred to as "roles". In the GUI, "roles" is still occasionally used, and is synonymous with "profiles".

The OAuth Roles window contains the following options:

• Create: Create a role mapping.
• Edit: Edit the selected role mapping.
• Delete: Delete one or more selected role mappings.
• Search: Search for role mappings by name.
• Show x entries: Limit the number of entries that are displayed at once (20 or 50).
• Sort: Sort columns in ascending or descending order.

To create an OAuth role mapping:

1. Go to System > Settings > Authentication.
2. Set Authentication Access to Remote.
3. In the Remote Server dropdown, select OAuth2.
4. Click View OAuth Roles.
5. In the OAuth Roles window, click Create.
6. In the Create Role window, enter the following information:

   Field	Required	Description
   Role Name	Y	The OAuth role name. The name must match a role name on the OAuth server.
   Role Type	Y	Service Provider or Customer.
   FPC Roles	Y	Select the FortiPortal profile to associate with this OAuth role.

7. Click Save.