How to set up fortigate fsso to continue user authentication when the ad server is down?

[happyling111]

As the title says,

I have two ad servers and two win2022 servers

I can only install collector agent on win2022 server

How to set up fortigate fsso to continue user authentication when the ad server was down?

[spoojary]

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuring-Multiple-FSSO-Agent-to-Connect...

[AEK]

In production environment all should be redundant. Always use two FSSO agents.

On the other hand, when one AD is down it is still ok, but when all ADs are down it is considered as extreme emergency, and fixing FSSO authentication in that case has lower priority than fixing your AD servers.