FortiAuthenticator Force user logout after password reset

[AhmadYousef]

I have FortiAuthenticator as Radius, and FortiGate as DHCP server for Wireless clients.

If one user is connected with 3 devices, can I enforce user logout of all or remaining connected devices after user changes/reset his password on one of these devices?

[dbu]

Hi @AhmadYousef ,

Regarding FortiAuthenticator I have not tested this scenario in lab and not aware of any option like this , but if you want to logout the existing session of a user you can do it manually on the Fortigate from User&Devices.
You can also play with different timers on Fortigate
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Explanation-of-auth-timeout-types-for-Fire...

[ebilcari]

Theoretically that can be achieved because FortiAutheticator supports RADIUS disconnect messages and this is the method that is used to disconnect already authenticated users but this need to be checked if it's triggered on the event of password reset. Do you have that configured on your setup (FGT and FAC)?