FortiClient VPN only keeps asking for token (without MFA configured)

[Duchwwo]

Hi, Ive configured ipsec ikev2 for remote access vpn users (with radius group auth). The FortiClient VPN Only keeps prompting for token, even though MFA is not configured on FGT. The only workaround I've found so far is to reinstalling the FortiClient, which resolves the issue. Has anyone experienced a similar problem or found a permanent solution for this behavior?

FGT 7.2.12 and 7.4.9

FC 7.4.3.1761 and 7.4.3.1790

[funkylicious]

hi,

quite strange, not gonna lie.

are you using FortiAuth as RADIUS server or NPS/Windows Server ?

[Duchwwo]

Hi, I am using Windows NPS, but I don’t think that’s the issue — the token window sometimes shows up before I even enter credentials.