Technical Tip: How to disable the FortiCloud option to login to firewall

[rsondal]

Description	This article describes how to disable the Sign in with FortiCloud option for FortiGate GUI access.
Scope	FortiGate v7.0.
Solution	FortiGate can provide the option to log in to the firewall with FortiCloud: To disable this option, log in to FortiGate. Under Settings, disable the option 'FortiCloud Single Sign-On' (the option may also be named Allow administrative login using FortiCloud SSO', depending on firmware). Configure via CLI: config system global     set admin-forticloud-sso-login disable end Note: This article can be used as a mitigation for vulnerability FG-IR-25-647. The vulnerability only applies when FortiCloud SSO login is enabled. Disabling the 'Allow administrative login using FortiCloud SSO' option prevents exposure until the device is upgraded to a fixed FortiOS version. Related document:  Multiple Fortinet Products' FortiCloud SSO Login Authentication Bypass