Skip to main content
Salexmineralex
New Member
April 9, 2026
Question

Prefill Username

  • April 9, 2026
  • 1 reply
  • 92 views

How to pre-fill username field on OAuth Service portal from login_hint parameter in FortiAuthenticator 6.6.2?

I have a Keycloak server with the form of user and password with OpenIdConnect service , I want only to use Fortiauthenticator for the OTP with fortitoken, but i dont want the for of user and password in the fortiauth side

1 reply

Jean-Philippe_P
Staff & Editor
Staff & Editor
April 22, 2026

Hello Salexmineralex,

 

I found this solution, can you tell us if it helps, please?

 

To pre-fill the username field on an OAuth service portal using the login_hint parameter in FortiAuthenticator 6.6.2, you can follow these steps:

Configuration Steps

  1. OAuth Service Configuration: Ensure that your FortiAuthenticator is configured as an OAuth server. This involves setting up the OAuth service and creating the necessary OAuth policies and portals.
     

  2. Use of login_hint Parameter:

    • The login_hint parameter can be used to pre-fill the username field. This parameter is typically passed in the URL or as part of the authentication request to the OAuth service.
    • Ensure that your Keycloak server is configured to send the login_hint parameter when redirecting to the FortiAuthenticator OAuth service.
       
  3. FortiAuthenticator Settings: In FortiAuthenticator, ensure that the OAuth portal is configured to accept and process the login_hint parameter. This might involve custom scripting or configuration to map the login_hint to the username field.
     

  4. Integration with FortiToken for OTP: Configure FortiAuthenticator to handle OTP authentication using FortiToken. This can be set up in the Authentication Flow settings, where you can specify that OTP is required after the username is pre-filled.
     

Considerations

  • Avoiding Username and Password Form: If you want to avoid displaying the username and password form on the FortiAuthenticator side, ensure that the authentication flow is configured to skip this step. This might involve custom configurations or using specific authentication methods that bypass the standard login form.
     

  • Testing and Validation: After configuration, test the setup to ensure that the login_hint parameter correctly pre-fills the username and that the OTP authentication works as expected.
     

Follow-ups and Clarification Questions

  • Have you configured the Keycloak server to send the login_hint parameter?
  • Is the FortiAuthenticator OAuth service correctly set up to handle the login_hint parameter?
  • Do you need assistance with configuring FortiToken for OTP authentication?

 

If you need further assistance or specific configuration details, please provide more information about your current setup and any error messages you might be encountering.

Jean-Philippe - Fortinet Community Team
Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.