Chapter 1 What’s New for FortiOS 5.0 : Authentication: users and devices : SSO using a FortiAuthenticator unit : Administrator’s view of FortiAuthenticator SSO authentication : FortiClient SSO Mobility Agent
  
FortiClient SSO Mobility Agent
Your users must be running FortiClient Endpoint Security v5.0 to make use of this type of authentication.
On the FortiAuthenticator unit, you need to enable FortiClient Service when you define the unit’s secret key. Go to SSO & Dynamic Policies > SSO > Options. You need to provide your users the FortiAuthenticator IP address and secret key so that they can configure the FortiClient SSO Mobility Agent on their computers.