nerdexam
Fortinet

NSE4 · Question #175

Which of the following are valid components of the Fortinet Server Authentication Extensions (FSAE)? (Select all that apply.)

The correct answer is B. Collector Agent. E. Domain Controller Agent. The valid components of Fortinet Server Authentication Extensions (FSAE), also known as Fortinet Single Sign-On (FSSO), are the Collector Agent and the Domain Controller Agent.

Submitted by kevin_r· Apr 18, 2026Firewall Policies and Authentication

Question

Which of the following are valid components of the Fortinet Server Authentication Extensions (FSAE)? (Select all that apply.)

Options

  • ADomain Local Security Agent.
  • BCollector Agent.
  • CActive Directory Agent.
  • DUser Authentication Agent.
  • EDomain Controller Agent.

How the community answered

(47 responses)
  • A
    2% (1)
  • B
    87% (41)
  • C
    4% (2)
  • D
    6% (3)

Why each option

The valid components of Fortinet Server Authentication Extensions (FSAE), also known as Fortinet Single Sign-On (FSSO), are the Collector Agent and the Domain Controller Agent.

ADomain Local Security Agent.

"Domain Local Security Agent" is not a standard or recognized component of Fortinet Server Authentication Extensions (FSAE/FSSO).

BCollector Agent.Correct

The Collector Agent is a central component of FSAE/FSSO responsible for gathering user logon information from various sources (like domain controllers) and forwarding it to the FortiGate for identity-based policies.

CActive Directory Agent.

"Active Directory Agent" is not the precise name of an FSAE/FSSO component; the specific component for Active Directory integration is typically the Domain Controller Agent.

DUser Authentication Agent.

"User Authentication Agent" is a generic term and not a specific, named component within the Fortinet Server Authentication Extensions (FSAE/FSSO) architecture.

EDomain Controller Agent.Correct

The Domain Controller Agent is a specific component that runs on Microsoft Active Directory domain controllers to monitor and report user logon events to the Collector Agent.

Concept tested: Fortinet Server Authentication Extensions (FSAE) components

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/684175/configuring-fssso-to-monitor-user-logons

Topics

#FSAE Components#Fortinet Single Sign-On#Authentication Integration#Collector Agent

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice