FortiGate 100D SSL-VPN with FortiToken Mobile (no FortiAuthenticator)

Hello my friends,

I've just added 20 FortiTokens to my FortiGate 100D. I previously had my SSL-VPN users (20) attached to a LDAP User Group (AD security group "Mobile_Users"). But now I want to implement 2FA with the FortiTokens.

Is there a way to let the users authenticate with the tokens, without the need of buying a VM FortiAuthenticator? For now I have to remove the user from the Mobile_User security group in my AD and create a local user on the firewall and assign a token to this account. This means 2 times administration. I would like to assign the tokens to the AD / LDAP users.

It's not a big problem, because it's only 20 users. But it would simplify it a bit :)

Thanks for participating.

Lars