Troubleshooting Tip: FortiClient SSO Mobility Agent license count too low

[matanaskovic]

Description	This article explains why the User Inventory widget in the FortiAuthenticator Dashboard shows an incorrect number of allowed FortiClient Workstations, even when a FortiClient SSO Mobility Agent license for 2000 users has been purchased.
Scope	FortiAuthenticator VM, SSO, License.
Solution	FortiClient SSO Mobility Agent automatically provides the username and IP address information to FortiAuthenticator. Scenario 1: Verify if the required licenses have been purchased for FSSOMA. In this example, there are only 200 user licenses, but there are no FSSOMA licenses On the Support Portal -> Asset Management -> Products -> More views -> License, the SKUs should be listed as any of the below: FCC-FAC2K-LIC - 2000 FortiClient connections. FCC-FAC10K-LIC - 10000 FortiClient connections. FCC-FACUNL-LIC - unlimited FortiClient connections. FortiAuthenticator VM comes with a base allowance of 100 VM users. Licenses such as FSSOMA, FortiToken Mobile, and SMS are purchased separately. In the above example, there are no licenses, and the FortiClient SSO Mobility Agent license needs to be purchased. Scenario 2:  In this example, a FortiClient SSO Mobility Agent license for 2000 users has been purchased. This can be verified under Support Portal -> Asset Management. It is necessary to download the License file and import it to FortiAuthenticator -> System -> Administration -> Licensing to make 2000 FSSOMA users available. In some cases, however, the User Inventory widget still shows a maximum of 100 allowed FortiClient Workstations even after rebooting FortiAuthenticator: In this case, FortiAuthenticator is using the lowest values from the maximum users and FortiClient SSO licenses to calculate the maximum allowed users, which is 100. Note: To use 2000 FortiClient SSO licenses, it is necessary to additionally purchase an FAC VM base license for 2000 users, download the license file from the Support Portal, and import it to FortiAuthenticator. After a reboot, the User Inventory widget will indicate 2000 main users and 2000 FortiClient Workstations are available.  For regular FSSO via DC-Agent, polling mode or any other traditional event polling method, there is no need for FSSO Mobility Agent licensing. Related documents: Licensing FortiAuthenticator Identity and Access Management