Skip to main content
dirkdigs
New Member
June 24, 2021
Question

Using MS Authenticator for MFA with FortiCLient

  • June 24, 2021
  • 3 replies
  • 5779 views

Is this supported or is FortiToken the only option ?

    3 replies

    Markus
    New Member
    June 24, 2021
    Not knowing if MS Authenticator is working. I've enabled one of the two free tokens and tried with different OTP Apps, none of them was able to read the generated QR code. As we use MFA also for PC login and other webservices like owa, we ended up with duo. They have integration for Forti SSL VPN and this is working very well not only with mobile app push, but also with HW tokens like Ubikey. Duo is free for 10 users and you can create a trial account for 60 days.
    dirkdigs
    dirkdigsAuthor
    New Member
    June 24, 2021

    Sorry I don't understand your reply .

    is  MS Authenticator supported or Not ?

    Philippe_Gagne
    New Member
    June 24, 2021

    Yes, it is supported. 

     

    You need to use RADIUS to a MS NPS server with the NPS MFA plugin installed.

     

    Configuration of the MFA will not be done in your Fortigate, but in the radius server.

     

    Regards,

     

    Philippe

     

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.