Skip to main content
h_info0011490
Explorer
September 23, 2024
Question

FortiAuthenticator SMS API Key is not working

  • September 23, 2024
  • 7 replies
  • 1487 views

Hello Everyone,
We have two FAC VMs in our company that are HA together.
The problem I encountered now is that I enter the API token in the parameters related to the HTTP in the SMS Gateway configuration, but it does not work it , but with username and password parameters, it communicates well with the SMS provider and the SMS is sent and received , but it doesn't work with API token.
I wanted to know if the FAC with version 6.6.2 supports API Token in the  HTTP Parameter or not.

Or is there an alternative solution to enter the API token in the HTTP parameters or not.
thanks a lot.

 

 

7 replies

Jean-Philippe_P
Staff & Editor
Staff & Editor
September 26, 2024

Hello h_info0011490,

 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

 

Thanks, 

Jean-Philippe - Fortinet Community Team
Jean-Philippe_P
Staff & Editor
Staff & Editor
September 27, 2024

Hello,

 

We are still looking for an answer to your question.

 

We will come back to you ASAP.

 

Thanks,

Jean-Philippe - Fortinet Community Team
AEK
SuperUser
SuperUser
September 27, 2024

Hello

As far as I know, it depends on your SMS gateway provider if he supports it. You need to contact him and ask him if he supports it as http parameter and what name should be given to the parameter.

On the other hand, since user/password are working for you, why do you need it via API token?

AEK
h_info0011490
Explorer
October 5, 2024

Hello Dear Friend

Now some SMS providers do not use username and password and only support API Token.
If you have worked with Cisco ISE ,  you can easily use the API token in the SMS Gateway section, but not FAC.

In my opinion, there must be a solution for this, or in general, FAC does not support the API token in SMS Gateway Section.

Thanks.

live89
Explorer III
February 3, 2026

This is actually absurd.

 

How till this day FAC does not support API token in authorization header? 

 

Is this still in v8.0 ?

AEK
SuperUser
SuperUser
February 3, 2026

I guess this is probably because sms is nos recommended anymore for security.

AEK
live89
Explorer III
February 3, 2026

This is one way to look at this. 

Recommended or not, that is a CISO decision to make. 

Fortinet should provide the option and you decide whether to use it or not.

Also, some societies not willing to work with mobile applications, i.e fortitoken. Mostly because of religious reasons, there phones only have SEND/END buttons and SMS messages.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!