FortiAuthenticator
FortiAuthenticator provides access management and single sign on.
matanaskovic
Staff
Staff
Article Id 228904
Description This article explains why the User Inventory widget in the FortiAuthenticator Dashboard shows an incorrect number of allowed FortiClient Workstations, even when a FortiClient SSO Mobility Agent license for 2000 users has been purchased.
Scope FortiAuthenticator VM, SSO, License.
Solution

FortiAuthenticator VM comes with a base allowance of 100 VM users. Licenses such as FSSOMA, FTM and SMS are purchased separately.

 

In this case, a FortiClient SSO Mobility Agent license for 2000 users has been purchased. This can be verified under Support Portal > Asset Management.

 

matanaskovic_0-1667556927257.png

 

It's necessary to download the License file and import it to FortiAuthenticator -> System -> Administration -> Licensing to make 2000 FSSOMA users available.

 

In some cases however, the User Inventory widget still shows a maximum of 100 allowed FortiClient Workstations even after rebooting FortiAuthenticator:

 

matanaskovic_1-1667557168757.png

 

In this case, FortiAuthenticator is using the lowest values from maximum users and FortiClient SSO licenses to calculate the maximum allowed users, which is 100.

 

To use 2000 FortiClient SSO licenses, it is necessary to additionally purchase an FAC VM base license for 2000 users, download the license file from the Support Portal and import it to FortiAuthenticator.

After a reboot, the User Inventory widget will indicate 2000 main users and 2000 FortiClient Workstations are available. 

 

Related articles:

https://docs.fortinet.com/document/fortiauthenticator/6.4.6/administration-guide/93026/licensing

https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/FortiAuthenticator.pdf