View all questions & answers for the FCSS - FortiSASE 25 Administrator Exam Materials exam
FCSS - FortiSASE 25 Administrator Exam Materials - Question #23 Discussion
Community Explanations & Comments (2)
Mbuh Mbuh
1 year ago
Selected: C
Please help confirm: (Study Guide Page 43)
You can request that single sign-on for user onboarding be enabled by opening a ticket with Fortinet Support. The supported user verification method is SAML SSO. The end user must enter their credentials to register FortiClient with FortiSASE. Enabling this feature provides an additional layer of security during Forticlient registration. FortiSASE can be a service provider, while products like FortiAuthenticator, Okta, Etra ID, and so on can act as an Idp for this configuration.
Security Posture Tags – These are applied after registration to enforce compliance (e.g., antivirus status) but don’t secure the registration process itself.
You can request that single sign-on for user onboarding be enabled by opening a ticket with Fortinet Support. The supported user verification method is SAML SSO. The end user must enter their credentials to register FortiClient with FortiSASE. Enabling this feature provides an additional layer of security during Forticlient registration. FortiSASE can be a service provider, while products like FortiAuthenticator, Okta, Etra ID, and so on can act as an Idp for this configuration.
Security Posture Tags – These are applied after registration to enforce compliance (e.g., antivirus status) but don’t secure the registration process itself.
leocopek
1 year ago
Selected: C
FortiSASE enhances security during managed endpoint client onboarding by enforcing user authentication via SAML SSO, ensuring only authenticated users and endpoints can register. This prevents unauthorized endpoints, even those with a valid invitation code to connect to FortiSASE Management service. For details on client onboarding using Invitation code, see Client onboarding and Managed endpoint client onboarding.
What can be configured on FortiSASE as an additional layer of security for FortiClient registration? (Choose one answer)
Brave-Dump Community Votes