User management

The FortiAuthenticator user database has the benefit of being able to associate extensive information with each user, as you would expect of RADIUS and LDAP servers. This information includes whether the user is an administrator, uses RADIUS authentication, or uses two-factor authentication, and includes personal information such as full name, address, password recovery options, and the groups that the user belongs to.

The RADIUS server on FortiAuthenticator is configured using default settings. For a user to authenticate using RADIUS, the option Allow RADIUS Authentication must be selected for that user’s entry, and the FortiGate unit must be added to the authentication client list. See RADIUS service.

This section contains the following topics:

• Administrators
• Local users
• Remote users
• Remote user sync rules
• Guest users
• User groups
• Usage profile
• Realms
• FortiTokens
• MAC devices
• RADIUS attributes