fortinet single sign on

what is a typical base configuration that most people are doing as far as deploying a new fortigate for a small business of about 100 users with active directory domain . should i be installing the collector agent on my primary domain controller?

is there any advantages of enabling FSSO if my IPv4 polices are not user based? Would i get any logging advantages?

How would i enable FSSO just for logging of user activity purposes?