Technical Tip: activate FIDO authentication

[kiri]

Description	This article describes how to enable FIDO authentication.
Scope	FortiAuthenticator, FortiToken 400, FIDO.
Solution	Enable FIDO authentication on the user properties. See the administration guide. Alternatively, enable it in the sync rule if this needs to be done in bulk for a large number of users. Hand physical FortiToken 400s out to the users to ensure they are registered. Follow the steps in the quickstart guide. Once the tokens have been registered, change the SAML Authentication method in Service provider settings to FIDO-only and, for instance, allow two-factor authentication (password and OTP) if all FIDO keys have been revoked for the user account. See the administration guide for instructions. Follow the same steps for OIDC. Currently, FIDO with Radius auth is not supported.