Skip to main content
SebastianJ
SebastianJ
New Member
September 13, 2022
Solved

Report on users with tokens and their status

  • September 13, 2022
  • 1 reply
  • 4080 views

Hi,

 

We are currently in progress of enrolling several thousand of users to use FortiToken. Is there a way to extract a list of users with the token assigned and the status of the token? We need to be able to see user name, and if the assigned token was already activated. This is the bare minimum.  Is there a way to do this?

 

Such built-in feature would be very useful when migrating large number of users. It would help to monitor the progress of the migration and remind the users with not activated tokens to perform actions.

 

Thank you in advance.

Best answer by gfleming

If you need more info than just the FortiToken serial then yes you'd have to extract from the FortiTokens endpoint and correlate the data.

1 reply

gfleming
Staff
gfleming
Staff
September 13, 2022

The Users Audit might help you here: https://docs.fortinet.com/document/fortiauthenticator/6.4.5/administration-guide/971842/audit-reports

 

You can also glean this info using the API

https://docs.fortinet.com/document/fortiauthenticator/6.4.5/rest-api-solution-guide/875895/fortitokens-fortitokens

https://docs.fortinet.com/document/fortiauthenticator/6.4.5/rest-api-solution-guide/347822/ldap-users-ldapusers

SebastianJ
SebastianJAuthor
New Member
September 13, 2022

Hi Graham,

 

Thanks for the answer. Since I need to combine Username or E-mail address with token status am I right thinking that I need to use API to export both LDAP users (/ldapusers/) and FortiTokens (/fortitokens/) and then join both tables using:

token_serial from LDAP users

and

serial from FortiTokens?

gfleming
Staff
gflemingAnswer
Staff
September 13, 2022

If you need more info than just the FortiToken serial then yes you'd have to extract from the FortiTokens endpoint and correlate the data.

Terms & ConditionsAccessibility statement