FortiGate Firewall Web Filter Authentication
Allow authentication on block - Allow Fortigate Access Internet for Domain Users Only
install FSSO collecter agent in Domain controller in order to monitor login Events of users
Passive Authentication | FSSO