Technical Tip: How to use FortiPAM secret to generate MFA on Azure Portal

Here are the steps  to add Azure MFA to a FortiPAM secret:

1. Get the token seed on the Azure user account.

2. Import the TOTP shared key to the FortiPAM as a third-party token.

Note:

The shared key must be converted to all uppercase (standard base32) to become valid. 

3. If it still shows as invalid even after converting the shared key to all uppercase, try to import it on the CLI.

config secret data
    edit secret_xxx
        config totp
            set status enable
            set use-template-setting disable
            set shared-key GCCFNJJVMFRTZ5MY
        end
    end
end

4. After successfully adding the shared key to the FortiPAM secret, it will generate an MFA verification code.

5. Import the code for the Azure account MFA verification.