Create connectors with OAuth 2.0 token-based authentication 7.4.1
FortiClient EMS now supports a new type of connector that uses OAuth 2.0 token-based authentication. Previously, only certificate-based authentication was supported. When the EMS administrator creates a connector, FortiClient EMS generates a Client ID and Client Secret to be used by the product on the other side of the connector. You can integrate with FortiADC, FortiAnalyzer, FortiEDR, FortiManager, FortiSIEM, FortiToken Cloud, or FortiWeb.
To create a connector with OAuth 2.0 token-based authentication:
-
Go to Fabric & Connectors > Fabric Devices.
-
Click Add. The Add OAuth 2.0 Fabric Connector dialog is displayed.
-
Select the Connector Type.
-
Enter the Serial Number.
-
Enter the VDOM, if desired.
-
Click Next.
-
Select the Role. These roles define which API connectors are authorized to access it.
-
Enter the Token Lifetime.
After the Token Lifetime is expired, the token is can no longer be authorized. The default value is 3600 seconds and the minimum value is 60 seconds.
-
Enter the Alias, if desired.
-
Click Finish. The Client ID and Client Secret are generated.
-
Copy the Client ID and Client Secret.
-
Click Close. A confirmation dialog is displayed.
-
Click Yes.
The Client ID and Client Secret can be used by other Fortinet devices that support OAuth 2.0 Fabric connector features to call FortiClient EMS APIs.