Skip to main content
FortiUserVN
FortiUserVN
Explorer
June 19, 2026
Question

What is the difference between FSSO and RSSO?

  • June 19, 2026
  • 1 reply
  • 43 views

Hello everyone!

I have a question: What is the difference between Fortinet Single Sign-On (FSSO) and Radius Single Sign-On (RSSO)? What are the biggest differences between them? In what situations should I use FSSO and RSSO? Can I combine both?

If I want to use them for user authentication during VPN connections, which one is best?

Thank you!

    1 reply

    sjoshi
    Staff
    sjoshi
    Staff
    June 19, 2026

    Hi ​@FortiUserVN 

     

    Fortinet Single Sign-On (FSSO) and RADIUS Single Sign-On (RSSO) both enable identity-based policies and transparent user authentication on FortiGate devices, but they differ in architecture, data sources, and optimal use cases.

     

    FSSO (Fortinet Single Sign‑On):

    • Integrates closely with Active Directory (AD) or LDAP to identify logged‑in domain users.
    • Uses Collector Agents (or FortiAuthenticator) to monitor AD logon events and map users to IPs.
    • Provides the FortiGate with group and user information for policy enforcement.
    • Ideal for LAN or enterprise networks where users authenticate via Windows domains.

     

    RSSO (RADIUS Single Sign‑On):

     

    For VPN connection use the active authentication.

    Thanks, Salon
    Terms & ConditionsAccessibility statement