Adding, syncing, and deleting users

When a user is created with FIC as the authentication method on an application (e.g., FortiGate), the user data is automatically added to the FIC system.

When a user with FIC as auth method on an application is deleted, the user data is automatically deleted from the FIC system. Deleting an application from the FIC portal deletes all users on the application. Additionally, you can delete individual users in the Users page of the FIC portal. You can sync user data anytime from the application (FortiGate in this case) to FIC by running the "exec fortitoken-cloud sync" command, as discussed in the following use case.

Use case

1. Create or delete users in FGT.

2. Run “exec fortitoken-cloud sync” on FGT to sync users with FIC auth method to FIC:

• If syncing works well, the output will show:

  Sync status: {"status": "complete", "msg": {"delete": {"success": 0, "failure": 0}, "modify": {"success": 0, "failure": 0}, "create": {"success": 3, "failure": 0}}} 
  User synchronization completed! 

• If syncing failed, the output will show:

  Sync status: {"status": "complete", "msg": {"delete": {"success": 0, "failure": 0}, "modify": {"success": 0, "failure": 0}, "create": {"success": 0, "failure": 3}}} 
  User synchronization completed! 

• If you encounter the “failure” as shown above, check to see if this application exists in the FIC side by searching the SN in the applications > FortiProducts page.
  • If it does not exist, check to see if the switch Auto-create Auch Client is enabled in the Settings > Global page.
  • If it does exist, check to see if the user quota has reached the maximum, or if the realm assigned has available quota and if the Share-quota Mode is disabled.
• If the connection to FIC is unstable or unavailable, the output will show:

  Cannot find ftc server! 
  Cannot retrieve user information from FortiToken Cloud! 
  Command fail. Return code -1