Technical Tip: FortiPortal Admin Portal capabilities, limitations, and field constraints

Organization:

• Organization name: maximum 64 characters.
  
• Email: maximum 80 characters.
• First Name: maximum 25 characters.
• Last Name: maximum 25 characters.
• Logo: maximum size 1 Mb.
• ADOM Name: maximum 48 characters.

Contact:

• Address1: maximum 45 characters.
• Address2: maximum 45 characters.
• City: maximum 25 characters.
• State: maximum 25 characters.
• ZIP: maximum 10 characters.
• Phone: maximum 30 digits and no special characters like '+'.

Sites:

• Name: maximum 255 characters.
• Contact Name: maximum 255 characters.
• Email: maximum 255 characters.
• Phone: maximum 30 digits and no special characters allowed, like +.

Users:

• First Name: maximum 25 characters.
• Last Name: maximum 25 characters.
• Password: maximum 32 characters.
• Password Expires After: maximum 180 days, 0 means never expires.
• Enable Password Policy -> maximum Length: between 8 and 32.

Devices:

• Name: maximum 64 characters.
• Host: either IP or FQDN of maximum 64 characters.
• Username: maximum 64 characters.
• Password: maximum 64 characters.
• Port: value must be less than or equal to 65535.

System -> Settings:

• Session timeout: value can be set between 15 and 3240 minutes.
• Authentication Retry Threshold: maximum value is 999999999.

System -> Profiles:

Name: maximum 64 characters.

System -> Additional resources:

URL: Must be set in full format (e.g., https://domain.com) with a maximum of 79 characters.

Notifications:

• Name: maximum 255 characters.
• Message: maximum 255 characters.

System -> Admins -> Multi-Organization:

• A multi-organization user cannot create a new site. This is because the user is statically assigned to specific sites at the time of creation.
• A multi-organization user is not an administrator; it is still a customer-level user with access to multiple organizations.
  As such, its privileges are intentionally lower than those of an admin user. The user is only allowed to access the organizations explicitly assigned to it, and all other sections are hidden accordingly.

SSO/SAML admin users:

SSO/SAML users are not allowed to update other local accounts' passwords, no matter what their roles are.

Below types of users are allowed to change the password of other local accounts:

• Local accounts.
• FortiAuthenticator accounts(remote auth - not SSO/SAML).
• RADIUS accounts(remote auth).