Configure fortitoken on users inside a Radius server-group (without fortiauthenticator)

[Maerre]

Hello,

i purchased a Fortitoken Cloud license and i've been asked to configure MFA for all the user belonging to a radius server group and connecting via remote access with the forticlient.

I haven't found any documentation about how to implement this configuration without using fortiauthenticator, is it possibile?

If configuring a local user i've the option to select the fortitoken cloud license, when configuring the radius server group i'm not prompted for this option, i haven't seen any command neither via CLI.

Do you have any idea?

thank you

Bye

[funkylicious]

Hi,
As far as I know and read so far, you can do that to the users on a specific LDAP ( not RADIUS ) group, like here : https://docs.fortinet.com/document/fortigate/7.0.0/new-features/80565/synchronizing-ldap-active-dire...

For RADIUS, you can try and import the users as described here on the FGT, 

https://docs.fortinet.com/document/fortitoken-cloud/latest/admin-guide/163308/configure-local-radius...

[Maerre]

Hello,

yeah, i saw it is possibile with ldap but not with radius.

regarding your link, i'm looking for  a method to avoid creating or importing local user, i'd like to user the radius group already configured and link the fortitoken cloud...............but it seems not possibile.