Technical Tip: Provisioning tokens to administrator accounts with the prof_admin profile

Description

This article describes how to assign and provision a token for administrator accounts with the prof_admin profile.

Scope

FortiOS v7.2, v7.4, v7.6, v8.0.

Solution

As per the intended design, trial tokens can only be added or restored in the management VDOM, while all other licensed tokens can be added to any other non-management VDOMs.

Every administrators with the prof_admin profile can be provisioned with a token that has been added to the VDOM under that administrator's management.

The screenshots below are only provided for visual illustration of the process of assigning trial tokens.

1. VDOM 'TEST' is a non-management VDOM, and no trial tokens are listed yet:

2. VDOM 'TEST' is a management VDOM, and tokens were re-added to that specific VDOM by following the steps outlined in Technical Tip: Restoring an accidentally deleted trial or licensed FortiToken Mobile (FTM).

3. The management VDOM cannot be changed if two-factor authentication is enabled for an existing administrator account associated with that management VDOM.