Fortinet black logo

SSOMA

The <fssoma> </fssoma> XML tags contain FortiClient single sign on mobility agent (SSOMA) configuration elements:

<forticlient_configuration>

<fssoma>

<enabled>0</enabled>

<serveraddress>IP_or_FQDN</serveraddress>

<presharedkey>Encypted_Preshared_Key</presharedkey>

<address_category>0</address_category>

</fssoma>

</forticlient_configuration>

The following table provides the XML tags for SSO mobility agent, as well as the descriptions and default values where applicable.

XML tag

Description

Default value

<enabled>

Enable SSO.

Boolean value: [0 | 1]

0

<serveraddress>

FortiAuthenticator IP address or FQDN. Separate multiple IP addresses with a colon, for example, 10.5.0.150; 10.5.0.155.

<presharedkey>

Encrypted or unencrypted preshared key.

<address_category>

Encrypted or unencrypted preshared key.

If this option is set to 1, the SSOMA sends the physical adapter IP address to FortiAuthenticator when FortiClient is not connected to VPN. When connected to VPN, the SSOMA only sends the virtual adapter IP address to FortiAuthenticator.

If this option is set to 0, the SSOMA sends the physical adapter IP address to FortiAuthenticator when FCT is not connected to VPN. When connected to VPN, the SSOMA sends the virtual and physical adapter's IP addresses to FortiAuthenticator.

Boolean value: [0 | 1]

To enable the FortiClient SSO mobility agent service on FortiAuthenticator, you must first apply the applicable FortiClient license for FortiAuthenticator. See the FortiAuthenticator Administration Guide. For information on purchasing a FortiClient license, contact your authorized Fortinet reseller.

The <fssoma> </fssoma> XML tags contain FortiClient single sign on mobility agent (SSOMA) configuration elements:

<forticlient_configuration>

<fssoma>

<enabled>0</enabled>

<serveraddress>IP_or_FQDN</serveraddress>

<presharedkey>Encypted_Preshared_Key</presharedkey>

<address_category>0</address_category>

</fssoma>

</forticlient_configuration>

The following table provides the XML tags for SSO mobility agent, as well as the descriptions and default values where applicable.

XML tag

Description

Default value

<enabled>

Enable SSO.

Boolean value: [0 | 1]

0

<serveraddress>

FortiAuthenticator IP address or FQDN. Separate multiple IP addresses with a colon, for example, 10.5.0.150; 10.5.0.155.

<presharedkey>

Encrypted or unencrypted preshared key.

<address_category>

Encrypted or unencrypted preshared key.

If this option is set to 1, the SSOMA sends the physical adapter IP address to FortiAuthenticator when FortiClient is not connected to VPN. When connected to VPN, the SSOMA only sends the virtual adapter IP address to FortiAuthenticator.

If this option is set to 0, the SSOMA sends the physical adapter IP address to FortiAuthenticator when FCT is not connected to VPN. When connected to VPN, the SSOMA sends the virtual and physical adapter's IP addresses to FortiAuthenticator.

Boolean value: [0 | 1]

To enable the FortiClient SSO mobility agent service on FortiAuthenticator, you must first apply the applicable FortiClient license for FortiAuthenticator. See the FortiAuthenticator Administration Guide. For information on purchasing a FortiClient license, contact your authorized Fortinet reseller.