social media athentication thru FAC

Question

Dear FortiExpert,

Anyone here had a successful implem or played around FAC social media authentication?

Had a recent deployment coupled of FGs and APs. The customer wanted to maximize the functionalities of those devices till the discussion go beyond. At first, using email address as captive portal is the main requirement, FG and AP were able to addressed the requirement. Now they wanted to limit or define time for each wifi users at the very least 30 mins of web access. Looking at the docs seems nowhere to find similar information related to email add with time settings.

Based on my initial assessment FAC could deliver such requirement and offers more granularity in terms of portals and authentication.

I bumped this settings Under FAC Authentiction>Portal>Policies>Identity Sources>Social Users. I enable FB option and I stumbled on the message (please select an OAuth server) that I need to supply. I attached as well some of my settings for reference.

Anyone could help correction info that I need to supply? Social Media.jpg Auth Type.jpg

Debbie_FTNT · Answer

Hey R_F,

you can simply select 'email' in the social users list to allow users to sign up with email (and create temporary accounts).

There are options to integrate with Social Media like LinkedIn or Facebook, where you essentially set up an OAuth application that ties into FortiAuthenticator, so users can authenticate with their Facebook/LinkedIn/other account, but this is not what you're looking for, correct?

If you do want to go the OAuth route, you would have to create an OAuth server entry under Remote Servers in FortiAuthenticator, and an application entry in Facebook/LinkedIn/etc that FortiAuthenticator can then interact with.

Sign up

Login with SSO

Login to the community

Login with SSO