Technical Tip: FSSO Collector Agent to Monitor Logon Events for Account using Alternative UPN Suffix

[adimailig]

Description	This article describes that the FSSO Collector Agent can monitor logon events for accounts using multiple UPN (User Principal Name) Suffixes and authenticating using RADIUS. Example: Default UPN :  test_user@test-domain.com Alternative UPN Suffix :  student.test-domain.com Sample Login using Default UPN : test_user@test-domain.com Sample Login using Alternative UPN Suffix : test_user@student.test-domain.com
Scope	FortiGate, FSSO.
Solution	In order for FSSO Collector Agent to monitor logon events from Alternative UPN suffixes, it should be: FSSO Collector Agent is running on Advance Mode: Technical Tip: How to switch FSSO operation mode from Standard Mode to Advanced Mode   FSSO Collector Agent is listening/monitoring for Radius Accounting: Agent-based FSSO    Additional Steps on FSSO CA: Select 'Select Domains to Monitor': Highlight the domain and select 'Setting'. The setting is only available/editable on Advance Mode: Input the server address, port, and user credential, then select 'OK'. Credential is essential and it should have domain permission on Domain Controller and AD Server.