When a user logs in, FSSO typically collects: username, domain, workstation, IP address, and group membership, and forwards it to FortiGate/FortiManager
-
### Building blocks
+
### Operating modes
**A) Collector Agent (CA) (Windows FSSO agent)**
The FSSO Collector Agent runs as a service and collects logon events, then sends user/IP mappings to FortiGate (often based on group filters).
