To determine if the FortiGate has entered SSL VPN conserve mode -

diagnose vpn ssl statistics

To create a user account:

User & Device > User Definition, and select Create New.

config user local

To create user groups:

User & Device > User Groups and select Create New.

config user group

config user ldap

edit <username>
set server <domain>
set password-expiry-warning enable
set password-renewal enable
next
end

MAC host check

conf vpn ssl web portal
edit portal
set mac-addr-check enable
set mac-addr-action allow
config mac-addr-check-rule
edit "rule1"
set mac-addr-list 01:01:01:01:01:01 08:00:27:d4:06:5d
set mac-addr-mask 48
end
end

To set tunnel-mode client IP address range - CLI:

config firewall address
edit SSL_tunnel_users
set type iprange
set end-ip 10.254.254.100
set start-ip 10.254.254.80
end

config vpn ssl settings

set auth-timeout 18000
end

To allow one-time login per user

config vpn ssl web portal

edit <portal_name>
set limit-user-logins enable
end