They belong to a Windows Active Directory (AD) group called WiFiAccess.

The Network Policy Server (NPS) or RADIUS server performs user authentication and passes the WiFi group attribute to the FortiGate so that the appropriate security policy is applied.

To learn more about it, see WiFi with WSSO using Windows NPS and FortiGate Groups.

Under Conditions tab, enter Client IPv4 Address as the FortiGates IP address.

In Conditions tab, click on Add, select Windows Group, then select Add.

On Attribute Information window, click Add, type 12356 next to Enter Vendor Code, next select Yes.

It conforms. Click on Configure Attribute and a new window pops up, on Vendor-assigned attribute number enter 1, on Attribute format select String, and in Attribute value enter WiFi and select OK.

Enter the Domain Controller IP address and the Server Secret that you entered on NPS.

Try this with a user that belongs to the WiFiAccess Windows AD Group.

You can see the User Name, User Group and verify that WSSO authentication Method was used.

Free Radius Server For Windows