Yubico Authenticator App for Forticloud log in

Hello razel0,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Hi again,

We are still trying to get you an answer or help. We will reply as soon as we are able.

If anyone else has any advice, please feel free to contribute!

Hello razel0,

I found this solution. Can you tell us if it helps?

Your situation with FortiCloud MFA and the Yubico Authenticator app showing a grayed-out code is unusual but not unheard of. Here’s a detailed breakdown of what might be happening and how to resolve it:

Why is the code grayed out in Yubico Authenticator?

• Grayed-out codes usually indicate the code is expired or the app is not properly syncing the time. MFA apps rely on time-based one-time passwords (TOTP), so if the device’s clock is off, it can cause codes to be invalid or appear inactive.
• Another possibility is the Yubico app might not fully support the FortiCloud MFA token format or the QR code parameters.

Steps to troubleshoot and fix:

1. Check Device Time Settings:

   • Ensure your phone’s time is set to automatic and synchronized with the network time.
   • On iOS or Android, confirm the time zone and clock are accurate.
   • If possible, toggle automatic time off and on again to force resync.

2. Re-scan the QR Code:

   • Delete the existing FortiCloud MFA entry in the Yubico app.
   • Re-scan the QR code from FortiCloud MFA setup.
   • Make sure you are scanning the correct QR code for TOTP (not a different type of MFA).
     
     

3. Try Another Authenticator App:

   • FortiCloud supports standard TOTP apps like Google Authenticator, Microsoft Authenticator, or Authy.
   • Try setting up MFA with one of these apps to verify if the issue is specific to Yubico Authenticator.
   • If it works on another app, the problem is likely compatibility with Yubico.
     
     

4. Check FortiCloud MFA Setup:

   • Confirm that FortiCloud is expecting a TOTP-based MFA and not a different method like push or hardware token.
   • Sometimes, FortiCloud MFA QR codes might include extra parameters that some authenticators don’t handle correctly.
     
     

5. Update Yubico Authenticator:

   • Ensure the app is updated to the latest version.
   • Older versions might have bugs or incomplete TOTP support.
     
     

6. Contact Fortinet Support or Community Forums:

   • Fortinet’s user forums and support channels often have specific guidance for MFA issues.
   • Other users may have reported similar issues with Yubico.
     
     

Summary:

• The grayed-out code usually means the code is expired or the app time is out of sync.
• Sync your phone’s time, re-scan the QR code, or try a different authenticator app.
• FortiCloud MFA is standard TOTP, so Google Authenticator or Authy often work seamlessly.
• If you want to keep using Yubico, verify app updates and compatibility.