Using MS Authenticator for MFA with FortiCLient

[dirkdigs]

Is this supported or is FortiToken the only option ?

[Markus]

Not knowing if MS Authenticator is working. I've enabled one of the two free tokens and tried with different OTP Apps, none of them was able to read the generated QR code. As we use MFA also for PC login and other webservices like owa, we ended up with duo. They have integration for Forti SSL VPN and this is working very well not only with mobile app push, but also with HW tokens like Ubikey. Duo is free for 10 users and you can create a trial account for 60 days.

[dirkdigs]

Sorry I don't understand your reply .

is  MS Authenticator supported or Not ?

[Philippe_Gagne]

Yes, it is supported. 

You need to use RADIUS to a MS NPS server with the NPS MFA plugin installed.

Configuration of the MFA will not be done in your Fortigate, but in the radius server.

Regards,

Philippe