Multi-factor authentication with FortiToken Cloud

FortiAnalyzer supports MFA with FortiToken Cloud.

To use MFA with FortiToken Cloud, you must have an active FortiToken Cloud license registered on the same FortiCloud account as FortiAnalyzer. For more information about how to register your FortiToken license on FortiCloud, see How to register your FTC license and the FortiCloud Asset Management guide.

For information about licenses for FortiToken Cloud, see How to Add Licenses to FortiToken Cloud.

To configure an administrator to use MFA with FortiToken Cloud:

1. Register FortiToken Cloud and FortiAnalyzer to the same FortiCloud account.

2. In FortiAnalyzer, go to System Settings > Admin > Administrators and click Create New or edit an existing administrator.

3. In the FortiToken Cloud field, select the token delivery method from the following options:
   

   FortiToken Mobile	Use the FortiToken Mobile app to get tokens. The following information must be provided: Email: Provide the administrator's email address. The administrator is sent an email to the specified address with a link to activate their token in the FortiToken Mobile app on their mobile device. After FortiToken Mobile app is activated, they will receive their token codes through the app.
   Email	Receive the token by email. The following information must be provided: Email: Provide the administrator's email address. Token codes will be sent to the specified email address.
   SMS	Receive the token by SMS message. The following information must be provided: Email: Provide the administrator's email address. Country Dial Code: Select a country code for the mobile number. Mobile Number: Enter a valid mobile phone number for receiving SMS messages.

   

4. Edit other fields as needed and click OK to save the administrator configuration.

   When the FortiToken Cloud is registered to the same FortiCloud account as FortiAnalyzer and the license permits adding a new user, the administrator is automatically synchronized to FortiToken Cloud with the specified FortiToken Cloud MFA method. Otherwise, an error message is displayed.
   You can view the user in FortiToken Cloud under User Management > Users. For more information, see the FortiToken Cloud Administration Guide.

5. When the administrator logs in, they are prompted to enter the token code from their email, SMS, or FortiToken Mobile app.