Had the same issue with an account logging every 10 seconds. TAC trace
the problem to the"Fortigate's Authentication Daemon". There is a
command to kill/restart the daemon. Note: running the command will
disconnect all users. We are running a HA A/P ...