Secure endpoint connection to EMS

Hello @CVB11 ,

You can use intitation only, AD authentication, or SAML authentication method to register users to EMS.That way, if users don't verify their identity can't register ems. 

You can review these documents for these settings.

https://docs.fortinet.com/document/forticlient/7.4.0/ems-administration-guide/319002/configuring-ems-settings

https://docs.fortinet.com/document/forticlient/7.4.0/ems-administration-guide/002758/invitations

https://docs.fortinet.com/document/forticlient/7.4.0/ems-administration-guide/334169/configuring-user-verification-with-saml-authentication-and-an-ldap-domain-user-account

https://docs.fortinet.com/document/forticlient/7.4.0/ems-administration-guide/417920/configuring-user-verification-with-an-ldap-server-for-authentication

Hello @CVB11 

You can also just use ZTNA, as these tags would be pushed on the end user and only the users having these tags will be allowed.

For reference: https://docs.fortinet.com/document/fortigate/7.2.5/ssl-vpn-to-ztna-migration-guide/299214/prepare-forticlient-and-forticlient-ems-for-ztna

https://docs.fortinet.com/document/fortigate/7.0.0/ztna-concept-guide/960805/forticlient-ems