Skip to main content
Duchwwo
Visitor III
October 14, 2025
Question

FortiClient VPN only keeps asking for token (without MFA configured)

  • October 14, 2025
  • 2 replies
  • 1332 views

Hi, Ive configured ipsec ikev2 for remote access vpn users (with radius group auth). The FortiClient VPN Only keeps prompting for token, even though MFA is not configured on FGT. The only workaround I've found so far is to reinstalling the FortiClient, which resolves the issue. Has anyone experienced a similar problem or found a permanent solution for this behavior?

FGT 7.2.12 and 7.4.9

FC 7.4.3.1761 and 7.4.3.1790

2 replies

funkylicious
SuperUser
SuperUser
October 14, 2025

hi,

quite strange, not gonna lie.

are you using FortiAuth as RADIUS server or NPS/Windows Server ?

"jack of all trades, master of none"
Duchwwo
DuchwwoAuthor
Visitor III
October 14, 2025

 

Hi, I am using Windows NPS, but I don’t think that’s the issue — the token window sometimes shows up before I even enter credentials.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!