Skip to main content
AMINET
New Member
October 27, 2022
Solved

Fortiems unverified users

  • October 27, 2022
  • 3 replies
  • 6114 views

Hi,

I have deployed a forticlient to a few hundred computers and recently noticed that all users are unverified, so how can I set all of these users to verified or skip user verification.

 

Thanks in advance,

Best answer by btan

Hi AMINET,

 

All existing users will be "unverified".

They are already skipping verification (anyone can join to EMS with a valid invitation code)

For them to be verified, they have to rejoin to EMS using an invitation code with "verification enabled":

1. Create an Invitation code with Verification type:
https://docs.fortinet.com/document/forticlient/7.0.7/ems-administration-guide/2758/invitations

2. Disconnect the endpoint and let it rejoin back by entering the new Invitation Code

3. They will be asked to login (via Local/LDAP/SAML) after entering new Invitation Code
4. If they rejoin to EMS after providing verification credential, they will become "verified user"

3 replies

btan
Staff & Editor
btanAnswer
Staff & Editor
October 29, 2022

Hi AMINET,

 

All existing users will be "unverified".

They are already skipping verification (anyone can join to EMS with a valid invitation code)

For them to be verified, they have to rejoin to EMS using an invitation code with "verification enabled":

1. Create an Invitation code with Verification type:
https://docs.fortinet.com/document/forticlient/7.0.7/ems-administration-guide/2758/invitations

2. Disconnect the endpoint and let it rejoin back by entering the new Invitation Code

3. They will be asked to login (via Local/LDAP/SAML) after entering new Invitation Code
4. If they rejoin to EMS after providing verification credential, they will become "verified user"

dmontgomery
Explorer
February 2, 2024

I have a related question - is it possible to prevent unverified users from acquiring an EMS license?

btan
Staff & Editor
Staff & Editor
February 5, 2024

Hello,


Yes it is possible.
You can enable 'Enforce User Verification' along with the setup above.
Refer: https://docs.fortinet.com/document/forticlient/7.0.11/ems-administration-guide/319002/configuring-ems-settings

Enforce user verification for endpoints. Users must log in to verified user accounts to register to EMS.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.