Troubleshooting Tip: FSSO Agent on Windows AD remains disconnected on FortiGate after the post upgrade of FortiAuthenticator

[rishab444]

Description	This article describes that FSSO Agent on Windows AD remains disconnected on FortiGate after the post upgrade of FortiAuthenticator.
Scope	FortiGate, FortiAuthenticator.
Solution	Run authentication debug as below: diagnose debug application authd -1 diagnose debug enable After 30 seconds disable the debug: diagnose debug disable Observe the debug which will look similar to the below error: _event_error[Local FSSO Agent]: error occurred in epoll_err: Success disconnect_server_only[Local FSSO Agent]: disconnecting authd_timer_run: 1 expired authd_epoll_work: timeout 9990 authd_epoll_work: timeout 9990 _event_error[FSSO]: error occurred in epoll_in: Success  <----- X. disconnect_server_only[FSSO]: disconnecting authd_timer_run: 1 expired authd_epoll_work: timeout 4990 authd_timer_run: 1 expired authd_epoll_work: timeout 4990 _event_error[Local FSSO Agent]: error occurred in epoll_err: Success disconnect_server_only[Local FSSO Agent]: disconnecting      2. Check if the sessions are available on FortiAuthenticator: To monitor SSO sessions, go to Monitor -> SSO -> SSO Sessions. If the sessions are available here, follow the next step.      3. From 6.4.5 A new Enable encryption toggle in the FortiGate pane is added in Fortinet SSO Methods -> SSO -> General.     4. Disable encryption on FortiAuthenticator as seen in the above figure.