Description
This article describes how to provision the FortiToken Cloud.
Related documents:
FortiToken Cloud
FortiToken Cloud - Admin Guide
Scope
FortiToken Cloud.
Solution
FortiToken Cloud can be provisioned to FortiGate administrators as well as local firewall users.
First, enable this feature in the CLI:
On FortiOS v6.0.x and earlier:
config system global
set fortitoken-cloud-service enable
end
On FortiOS v7.0.x and later:
config system global
set fortitoken-cloud enable
end
Note: It might be required to log out and log back in for the change to take effect.
To assign FortiToken Cloud two-factor authentication to an administrator:
- Go to: System -> Administrators. The list of administrators appears.
- Select an administrator to edit the configuration (in this example: ftm-cloud).
- Select the toggle to enable Two-factor Authentication. There are two authentication types available: FortiToken(mobile) and FortiToken Cloud.
- Select FortiToken Cloud as the Authentication Type.
- Select 'OK'.
In the administrator's list under the Two-factor Authentication column, the FortiToken Cloud icon for the administrator ftm-cloud is visible.
To assign FortiToken Cloud two-factor authentication to multiple users:
- Go to: User & Device -> User Definition. The list of users appears (Users must have valid email addresses in the configuration).
- Select all the users.
- 'Right-click' on the selected users (in this example: test4 and test6).
- From the drop-down list, select 'Assign Cloud Token'.
-
Select 'OK' on the prompt that appears to confirm the cloud token assignment
In the user's list under the Two-factor Authentication column, the FortiToken Cloud icon for the users test4 and test6 is visible.
A detailed guide to activate FortiToken Mobile on a phone can be found in this document: Activating FortiToken Mobile
