FortiToken OTP in external app

[Bman854]

Dear Support,

is there a way how to use FortiClient 2FA with other app than FortiToken mobile? In our case we are using Remote Desktop Manager (https://devolutions.net/remote-desktop-manager/) as a shared store for credentials for our team. There is support for TOTP and it works perfectly fine in the places, where Google Authenticator works. BUT not for the Fortinet 2FA, at least according to the https://www.reddit.com/r/fortinet/comments/s8qcqb/comment/hthwx0k/ or https://github.com/andOTP/andOTP/issues/508 . We dont't care that push notification wouldn't work in that situation...

Can I make a wish for interoperability added to the roadmap?

Kind Regards

[DPadula]

Hi Bman854,

To request for a new feature you need to contact your AM on Fortinet, unfortunately this type of request cannot be done via forum. 

[Debbie_FTNT]

Hey Bman854,

technically, the FortiToken mobile seeds can be exported during provisioning, under VERY specific circumstances.

Please check here: https://docs.fortinet.com/document/fortiauthenticator/6.6.1/rest-api-solution-guide/829822/local-use...
There is a section 'Third party integration: FTM provisioning' that goes into a bit of detail.

However:

- this requires use of a FortiAuthenticator, and the FortiToken mobile licence must be attached to that same authenticator

- the seeds ARE returned in an encrypted format, but I don't know if the Remote Desktop Manager can import them

I don't know of any other method to retrieve the seeds; that would indeed require an NFR as DPadula mentioned.

Cheers,

Debbie

[Bman854]

Thanks for all the info!