How to run FortiClient with SSO feature only, no Security Fabric Agent services

Hello, We use FortiGate 3700D running FortiOS v5.2.3 build670 (GA), managed from FortiManager v5.2.2-build0706 150415, and a FortiAuthenticator v4.00-build0019-20151007-patch00.

We 'd like to use the SSO feature included in the FortiClient 5.6.0 only.

Could we run FortiClient without Security Fabric Agent built-in services?

Could we build a FortiClient installation package disabling Security Fabric Agent services, to remove vulnerability scanning from the FortiClient first start? Thanks. Regards, Chris