Skip to main content
Accendi
Accendi
New Member
December 8, 2021
Question

Fortinet Single Sign On (FSSO) on Azure Virtual Desktop (AKA Windows Virtual Desktop, WVD)

  • December 8, 2021
  • 2 replies
  • 2320 views

Has anyone deployed FSSO on AVD that sits behind a pair of FortiGate NVAs in an Azure hub-spoke topology?

 

It's a basic idea in principle but I can't see that anyone has ever written a blog about it or even asked on a forum.


Basic High-Level Diagram:

https://imgur.com/5ld2chm

2 replies

A
Anonymous_User
Contributor III
April 9, 2022

Hi 

 

I don't see the reason why it should not work 

FSSO requirements are generic :

 

PC joined in domain 

FSSO CA to have access to Domain Controller Event logs  if the polling method is used 

Server where FSSO CA is installed to be in domain too

Proper DNS  resolution since FSSO is IP based 

 

 

pfrancoeur
pfrancoeur
New Member
October 13, 2022

We tried and it didn't work. Involved support and we were told it wasn't supported.

 

AVD (at least, in our architecture) is actually a modified Windows 10 desktop running in terminal server mode. Meaning that you have 15+ users on the same VM. If you use the traditional FSSO DC agent, this will have the same effect as on a TS, the last users to login to the desktop will determine the rights of all users on that same VM. 

We tried using the FSSO TS Agent but couldn't get it to work. That's where the support told us it wasn't supported in that particular context.

Terms & ConditionsAccessibility statement