Fortiems unverified users

[AMINET]

Hi,

I have deployed a forticlient to a few hundred computers and recently noticed that all users are unverified, so how can I set all of these users to verified or skip user verification.

Thanks in advance,

[btan · Accepted solution]

Hi AMINET,

All existing users will be "unverified".

They are already skipping verification (anyone can join to EMS with a valid invitation code)

For them to be verified, they have to rejoin to EMS using an invitation code with "verification enabled":

1. Create an Invitation code with Verification type:
https://docs.fortinet.com/document/forticlient/7.0.7/ems-administration-guide/2758/invitations

2. Disconnect the endpoint and let it rejoin back by entering the new Invitation Code

3. They will be asked to login (via Local/LDAP/SAML) after entering new Invitation Code
4. If they rejoin to EMS after providing verification credential, they will become "verified user"

[dmontgomery]

I have a related question - is it possible to prevent unverified users from acquiring an EMS license?

[btan]

Hello,

Yes it is possible.
You can enable 'Enforce User Verification' along with the setup above.
Refer: https://docs.fortinet.com/document/forticlient/7.0.11/ems-administration-guide/319002/configuring-em...

Enforce user verification for endpoints. Users must log in to verified user accounts to register to EMS.