Technical Tip: FortiSASE supports the Fortinet Single Sign On (FSSO) new feature
| Description | This article describes starting from 25.2.c, FortiSASE supports Fortinet Single Sign On (FSSO). |
| Scope | FortiSASE v25.2.c +. |
| Solution | The FortiSASE now supports Fortinet Single Sign On (FSSO): New Feature.
FSSO collects the domain-joined Windows clients' IP addresses and usernames. Then, control the traffic with the FSSO user groups for secure internet (SIA) access and secure private (SPA) access policies.
The FSSO can be deployed with two methods:
FortiAuthenticator or the FSSO collector agent needs to be reachable from FortiSASE security PoPs over the internet or via a SPA connection.
Note, currently FortiSASE only supports establishing an FSSO connection to a private FortiAuthenticator behind an SPA hub configured for BGP per overlay. |
