Chapter 3 Authentication for FortiOS 5.0 : Agent-based FSSO : Introduction to agent-based FSSO : FSSO for Citrix
  
FSSO for Citrix
Citrix users can enjoy a similar Single Sign-On experience as Windows AD users. The FSSO TS agent installed on each Citrix server provides user logon information to the FSSO Collector agent on the network. The FortiGate unit uses this information to authenticate the user in security policies.
Figure 121: Citrix SSO topology
Citrix users do not have unique IP addresses. When a Citrix user logs on, the TS agent assigns that user a range of ports. By default each user has a range of 200 ports.