Skip to main content
guptas
Staff
Staff
July 25, 2025

Technical Tip: How to enable FortiToken for an IAM user

  • July 25, 2025
  • 0 replies
  • 229 views
Description This articles describes how to change multi-factor authentication from an email token to a FortiToken for an IAM user.
Scope FortiAppSec Cloud.
Solution

It is recommended to use the FortiToken application for MFA to access FortiAppSec, as email tokens take time to send and may not be received by IAM users.

 

To change the multi-factor authentication, the IAM user first needs to log in using an email token and follow these steps to change the multi-factor authentication method to FortiToken:

 

Note: It does not matter whether the IAM user type is Local or Organization, as the FortiToken can be used for both IAM type users. 

 

Step 1:

 

Token.png

 

Step 2:

 

Token1.png

 

Step 3:

 

Token2.png

 

After the user selects 'Update', two emails will be sent to the user's registered email address. One of them will have the FortiToken QR code.

The FortiToken application provides an option to scan the QR Code. Once the QR token has been scanned, the portal will once again ask to add the token in order to verify it. 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!