FortiGate Authentication issue

Are you using FortiAuthenticator?

If so then did you check the status of the connectivity between FGT and FAC?

Hi,

Is the disclaimer option enabled in the firewall policy to prompt the users for authentication?

Otherwise it will try to use passive authentication.

Hi,

This kind of issue often points to a problem with captive portal redirection, user group mapping, or recent changes in DNS or routing that interfere with the authentication flow.

To restore proper redirection and ensure users are prompted to log in:

• Double-check that your policy with the user group is correctly positioned—above any general allow rules.

• Review the captive portal configuration to confirm it’s still active and properly defined.

• Ensure the user group is still linked to the correct authentication method.

• Verify that unauthenticated users are allowed DNS and HTTP/HTTPS access to trigger the redirection.

• If you're using an external captive portal, confirm that the FortiGate integration is still valid and that redirection to the login page is permitted.

You can refer to this guide for detailed steps on configuring and troubleshooting captive portal authentication with user groups and policy enforcement: https://help.cloudi-fi.com/hc/en-us/articles/28936913311261

Hope this helps

Hi,

I guess as you mention you are using local user.

can you share me the snap of your firewall policy configure

share:-

config user setting

Why are you using local firewall users?