Hello,
I am mainly using Paloalto,checkpoint and Juniper but i used fortinet for few months before. This task can be easy or a bit complicated depending on where do you want user groups to be authenticated on (local user, radius or Active Directory etc.). Feel free to ask me, i will help if you can give me web access to the device.