FortiAuthenticator VM

I know it's the neglected middle child of the Forti stack, but I'm getting ready to bump our FortiAuthenticator VM from 6.4 to 6.5. Reason being: We've stopped domain joining Macs and started using Entra Platform SSO and my internet lurnings have led me to believe 6.5's "Use for FSSO" checkbox on a remote oauth server is the secret sauce that makes it work.

Question: Has anyone done this? I'm fine jumping higher than 6.5 if needed I'm just very conservative when it comes to FAC because we're SSOMA everywhere and it's literally the only thing that can actually break our network.