question about passwordless logins and VPN

[TiborH]

Hi all,

A stated in subject, my question is about passwordless logins. So we are trying to implement yubikey with PIN + Touch as a primary authentication. Then Fortiauthenticator agent for windows with PIN + Token as a secondary/fallback authentication in case user forgets his yubikey. This two already work without any issues. Now comes the 3rd part :) On top of this we want to implement Always ON VPN with Forticlient and EMS. User should have zero interaction with forticlient. 

My question here is if this is even possible to do?

Thank you for your help

[AEK]

Hi Tibor

Auto-connect is possible with user/pass, or certificate, but I don't see how it can be possible PIN/Touch/Token.

[sjoshi]

you can refer this if this could be your help

https://community.fortinet.com/t5/FortiAuthenticator/Technical-Tip-How-to-import-YubiKey-to-FortiAut...