Technical Tip: How to provision FortiToken cloud

[Abin_FTNT]

Description

This article explains how to provision FortiToken cloud.

Useful links:
Fortinet Documentation

https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/FortiToken_Cloud.pdf
https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/1fa881fc-9c3f-11e9-81a4-005056...

Solution
FortiToken Cloud  can be provisioned to FortiGate administrators as well as local firewall users.

First, enable this feature in the CLI:

#config system global
set fortitoken-cloud-service enable
end

Note: It might be required to log out and log back in for the change to take effect.

To assign FortiToken Cloud two-factor authentication to an administrator:

1) Go to: System -> Administrators. The list of administrators appears.
2. Double-click on an administrator to edit the configuration (in this example: ftm-cloud).
3. Click the toggle to enable Two-factor Authentication. There are two authentication types available: FortiToken(mobile) and FortiToken Cloud.
4. Select FortiToken Cloud as the Authentication Type.
5. Click 'OK'.

In the administrators list under the Two-factor Authentication column, the FortiToken Cloud icon for the administrator ftm-cloud is visible.

To assign FortiToken Cloud two-factor authentication to multiple users:

1) Go to: User & Device -> User Definition. The list of users appears (Users must have valid email addresses in their configuration).
2) Select all the users.
3) Right-click on the selected users (in this example: test4 and test6)
4) From the drop down list, select 'Assign Cloud Token'.

5) Click 'OK' to the prompt that appears to confirm the cloud token assignment

In the users list under the Two-factor Authentication column, the FortiToken Cloud icon for the users test4 and test6 is visible.