FortiAuthenticator
FortiAuthenticator provides centralized authentication services for the Fortinet Security Fabric including multi-factor authentication, single sign-on services, certificate management, and guest management.
kwcheng__FTNT
Article Id 409372
Description This article describes the typical circumstances behind the 'FortiToken Synchronization'.
Scope FortiAuthenticator.
Solution

Event ID 10107 refers to an event log entry related to FortiToken time drift synchronization. This log can be used for both FortiToken Mobile and Hardware tokens.

 

Two-factor authentication (2FA) tokens rely on the device and server having their clocks aligned, since codes are generated from the current time. If there is time drift and the clocks are out of sync, the token will produce a code that does not match what the FortiAuthenticator expects, causing login failures.

 

The sample system event message will look like below:

 

Changing the time drift of Hardware tokens:

 

date=2025-09-03 time=20:13:33+0000 oid=8888 logid=10107 cat="Event" subcat="Admin Configuration" level="information" nas="" action="Edit" status="Success" msg="Successfully synchronized FortiToken FTK200XXXXXXXXXX. Drift was updated to -6." user="admin"

 

date=2025-09-03 time=20:13:33+0000 oid=8888 logid=10107 cat="Event" subcat="Admin Configuration" level="information" nas="" action="Edit" status="Success" msg="Successfully synchronized FortiToken FTK220XXXXXXXXXX. Drift was updated to 4." user="admin"

 

Changing the time drift of Mobile Tokens:

 

date=2025-09-03 time=20:13:33+0000 oid=8888 logid=10107 cat="Event" subcat="Admin Configuration" level="information" nas="" action="Edit" status="Success" msg="Successfully synchronized FortiToken FTKMOBXXXXXXXXXX. Drift was updated to 63." user="admin"

 

These logs can be viewed under Log Access -> Logs -> filter '10107'