| Description | This article describes how to configure FortiAuthenticator (FAC) to use the REST API for two-factor authentication (2FA) during Windows logins through the FortiAuthenticator Windows Agent. |
| Scope | FortiAuthenticator. |
| Solution |
Step 1: Enable REST API access on the FortiAuthenticator interface.
Step 2: Create an API Key for REST API Authentication. Create an admin account with Full Permission (manual token will not work if assigned with another profile) and enable web service.
Step 3: Enable 2FA for the users and assign a FortiToken. Go to Remote-user -> Enable OTP Authentication -> Select FortiToken -> Mobile -> Select the token.
Step 4: Install the agent on the Windows device that requires 2FA and add FortiAuthenticator Window Agent configuration.
Open the FortiAuthenticator Window agen -> Select Configure and then add the FortiAuthenticator IP or FQDN, Rest API username, and Rest API key copied before.
|
