Skip to main content
AhmadYousef
AhmadYousef
Visitor III
March 3, 2024
Question

FortiAuthenticator Force user logout after password reset

  • March 3, 2024
  • 2 replies
  • 1089 views

I have FortiAuthenticator as Radius, and FortiGate as DHCP server for Wireless clients.

If one user is connected with 3 devices, can I enforce user logout of all or remaining connected devices after user changes/reset his password on one of these devices?

2 replies

dbu
Staff
dbu
Staff
March 3, 2024

Hi @AhmadYousef ,

Regarding FortiAuthenticator I have not tested this scenario in lab and not aware of any option like this , but if you want to logout the existing session of a user you can do it manually on the Fortigate from User&Devices.
You can also play with different timers on Fortigate
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Explanation-of-auth-timeout-types-for-Firewall/ta-p/189423


 

ebilcari
Staff
ebilcari
Staff
March 11, 2024

Theoretically that can be achieved because FortiAutheticator supports RADIUS disconnect messages and this is the method that is used to disconnect already authenticated users but this need to be checked if it's triggered on the event of password reset. Do you have that configured on your setup (FGT and FAC)?

DM.PNG

Emirjon
    Terms & ConditionsAccessibility statement