Fortigate MFA set

Hi ​@Lalaram 

No, there is no way to use a single shared OTP code across all 15 firewalls. Each FortiToken (hardware or mobile) is cryptographically bound one-to-one to a specific user on a specific FortiGate. The OTP generated by a token is mathematically tied to its unique seed, which is registered to exactly one FortiGate and assigned to one user account at a time

you could have a single token assigned to a user and use the generated codes by it to login to all devices, via FortiAuthenticator

Not unless you register your Mobile Fortitokens license to FortiAuthenticator, to which you will authenticate, which also means you’d have to integrate it (FAC) with ISE. But, assuming you are talking about free 2 Mobile FTKs that come with each appliance FOrtigate - no, these are hard-registered to their appliances, you cannot move them, and you will have to have entry for each of the tokens in the Fortitoken app for such FTKs.

Doesn’t FortiToken Mobile Cloud/FortiIdentity Cloud work for that situation when multiple FGTs need to use the same token?
https://www.fortinet.com/products/identity-access-management/fortiidentity-cloud

Toshi