Technical Tip: FortiSASE supports the Fortinet Single Sign On (FSSO) new feature

[ChrisTan]

Description	This article describes starting from 25.2.c, FortiSASE supports Fortinet Single Sign On (FSSO).
Scope	FortiSASE v25.2.c +.
Solution	The FortiSASE now supports Fortinet Single Sign On (FSSO): New Feature. FSSO collects the domain-joined Windows clients' IP addresses and usernames. Then, control the traffic with the FSSO user groups for secure internet (SIA) access and secure private (SPA) access policies. The FSSO can be deployed with two methods: FortiAuthenticator. FSSO collector agent on Windows DC. FortiAuthenticator or the FSSO collector agent needs to be reachable from FortiSASE security PoPs over the internet or via a SPA connection. Note, currently FortiSASE only supports establishing an FSSO connection to a private FortiAuthenticator behind an SPA hub configured for BGP per overlay.