SSOMA
The <fssoma></fssoma> XML tags contain FortiClient single sign on mobility agent (SSOMA) configuration elements:
<forticlient_configuration>
<fssoma>
<enabled>0</enabled>
<serveraddress>IP_or_FQDN</serveraddress>
<presharedkey>Encypted_Preshared_Key</presharedkey>
<address_category>0</address_category>
<prefer_azure>1</prefer_azure>
</fssoma>
</forticlient_configuration>
The following table provides the XML tags for SSO mobility agent, as well as the descriptions and default values where applicable.
|
<enabled>
|
Enable SSO.
Boolean value: [0 | 1]
|
0
|
|
<serveraddress>
|
FortiAuthenticator IP address or FQDN. Separate multiple IP addresses with a colon, for example, 10.5.0.150; 10.5.0.155.
|
|
|
<presharedkey>
|
Encrypted or unencrypted preshared key.
|
|
|
<address_category>
|
If this option is set to 1, the SSOMA sends the physical adapter IP address to FortiAuthenticator when FortiClient is not connected to VPN. When connected to VPN, the SSOMA only sends the virtual adapter IP address to FortiAuthenticator.
If this option is set to 0, the SSOMA sends the physical adapter IP address to FortiAuthenticator when FCT is not connected to VPN. When connected to VPN, the SSOMA sends the virtual and physical adapter's IP addresses to FortiAuthenticator.
Boolean value: [0 | 1]
|
|
|
<prefer_azure>
|
Configure whether FortiClient detects Azure user information and sends it to FortiAuthenticator.
- If the endpoint is in a hybrid join (on-premise Active Directory (AD) and Microsoft Entra ID) environment, the following occurs:
- If
<prefer_azure> is set to 0, FortiClient sends the on-premise AD information to FortiAuthenticator. - If
<prefer_azure> is set to 1, FortiClient sends Entra ID information to FortiAuthenticator.
- If the endpoint is in an only on-premise local AD environment, FortiClient sends the on-premise local AD information to FortiAuthenticator regardless of the
<prefer_azure> configuration.
- If the endpoint is in an Entra ID environment, FortiClient sends the Entra ID information to FortiAuthenticator regardless of the
<prefer_azure> configuration.
Boolean value: [0 | 1]
|
|
|
To enable the FortiClient SSO mobility agent service on FortiAuthenticator, you must first apply the applicable FortiClient license for FortiAuthenticator. See the FortiAuthenticator Administration Guide. For information on purchasing a FortiClient license, contact your authorized Fortinet reseller.
|
