How to centraly manage forticlient instalations

if anyone please guide me through this challenge, the customer needs to centraly manage and enable vpn options over the forticlient via SSL VPN, i read that endpoint protection could do that, but i don´t know where to start

the key feature is "enable vpn before sign up" 

i read that we can do this creating a profile in the forticlient compliance and uploading the forticlient configuration file via CLI but this option is not enable in the customer machines