Fsso troubleshooting guide. With user information such as IP address and user group memberships from May 23, 2019 · Troubleshooting FSSO When installing, configuring, and working with FSSO some problems are quite common. Configure the Fortinet Single Sign-On Collector Agent. Troubleshooting … This video shows the procedure to perform FSSO connection troubleshooting using as guide the next kb:Troubleshooting Tip: FSSO Complete troubleshooting for T FSSO FortiOS can provide single sign-on capabilities to Windows AD, Citrix, VMware Horizon, Novell eDirectory, and Microsoft Exchange users with the help of agent software installed on these networks. Scope FortiGate, FSSO. To understand the differences between standard and advanced modes, read the following articles: Technical Tip: How to switch FSSO operation mode from Standard Mode to Advanced Mode. FSSO FortiOS can provide single sign-on capabilities to Windows AD, Citrix, VMware Horizon, Novell eDirectory, Microsoft Exchange, and third-party access point users with the help of FortiAuthenticator or agent software installed on these networks. Jul 17, 2023 · the underlying mechanisms behind how FSSO works to help users understand how to troubleshoot issues. The CA communicates with the FortiGate over TCP port 8000 and it listens on UDP port 8002 for updates from the DC agents. Solution Certain problems are known to occur in some cases when installing, configuring, and working with FSSO. The following tips Apr 9, 2024 · Explore the complexities of Fortinet's FSSO User Tracking in enterprise setups, including implementation tips and troubleshooting insights. Troubleshooting steps are provided. Configure a password for FSSO: Enable the Syslog Listener: Configure the LDAP Server: The LDAP server is necessary to configure the user group membership for the SSLVPN user. The SAML user groups name has been successfully pushed to FortiGate from FortiAuthenticator, appearing when you select View. Solution Flow Chart. These entities send information about user logons to the FortiGate unit. Creating an FSSO user group This example assumes that you have already set up FSSO on the Windows network and that it used advanced mode, meaning that it uses LDAP to access user group information. With user information such as IP address and user group memberships from the network, FortiGate security policies can Nov 8, 2022 · The group sslvpn-users-fsso and user jsmith are members of these two groups. It includes instructions for gathering user information from their PC, checking logon events on the Active Directory server, and verifying user account permissions. The FortiGate unit uses this information to authenticate the user in security policies. With user information such as IP address and user group memberships from The FSSO CA sends Domain Local Security Group and Global Security Group information to FortiGate units. A selection of these problems is covered in this article, including explanations and solutions. A selection of these problems follows including explanations and solutions. Select Apply & Refresh. Use this flow chart as a troubleshooting guide, HTML file with high resolution is attached at the This video shows the procedure to perform FSSO connection troubleshooting using as guide the next kb:Troubleshooting Tip: FSSO Complete troubleshooting for T FSSO Troubleshooting Guide for Fortigate The document outlines the steps to troubleshoot issues with the Fortinet Single Sign-On (FSSO) Server. Scope FortiGate, FSSO and FortiAuthenticator, if used as a FSSO collector. Configure Syslog Rules: Note: To configure FSSO on FortiGate: On FortiGate, go to Security Fabric > Fabric Connectors. Go to User & Device . Select View and make sure that the FSSO group has been pushed to FortiGate. The FSSO TS agent installed on each Citrix server provides user logon information to the FSSO Collector agent on the network. Feb 23, 2026 · advanced troubleshooting and collects information to deliver to Fortinet TAC for a support ticket. Uncover the best approach between FSSO Mobility Agent and DC Agent for efficient user tracking FSSO FortiOS can provide single sign-on capabilities to Windows AD, Citrix, VMware Horizon, Novell eDirectory, Microsoft Exchange, and third-party access point users with the help of FortiAuthenticator or agent software installed on these networks. FSSO for Citrix Citrix users can enjoy a similar Single Sign-On experience as Windows AD users. With user information such as IP address and user group memberships from Explore Fortinet's FSSO feature for seamless user authentication and enhanced security in your network. ScopeFortiGate Jun 26, 2025 · general troubleshooting steps for FSSO. The agent software sends information about user logons to the FortiGate unit. May 26, 2019 · Examples and troubleshooting This chapter provides an example of a FortiGate unit providing authenticated access to the Internet for both Windows network users and local users. Create a new FSSO agent connector to the FortiAuthenticator. Dec 30, 2025 · For more information about service account privileges, refer to: Technical Tip: Restricting a Fortinet Single Sign On Agent Service (FSSO) service account. The following topics… Fortinet Online Help FSSO FortiOS can provide single sign-on capabilities to Windows AD, Citrix, VMware Horizon, Novell eDirectory, Microsoft Exchange, and third-party access point users with the help of FortiAuthenticator or agent software installed on these networks. gtdi rdcv xegzd qmhade dztmqu drnumez erjm fomk ckvjub zulul