Fortinet black logo

CLI Reference

config authentication scheme

config authentication scheme

Configure Authentication Schemes.

config authentication scheme
    Description: Configure Authentication Schemes.
    edit <name>
        set domain-controller {string}
        set fsso-agent-for-ntlm {string}
        set fsso-guest [enable|disable]
        set kerberos-keytab {string}
        set method {option1}, {option2}, ...
        set negotiate-ntlm [enable|disable]
        set require-tfa [enable|disable]
        set saml-server {string}
        set saml-timeout {integer}
        set ssh-ca {string}
        set user-cert [enable|disable]
        set user-database <name1>, <name2>, ...
    next
end

config authentication scheme

Parameter

Description

Type

Size

Default

domain-controller

Domain controller setting.

string

Maximum length: 35

fsso-agent-for-ntlm

FSSO agent to use for NTLM authentication.

string

Maximum length: 35

fsso-guest

Enable/disable user fsso-guest authentication.

option

-

disable

Option

Description

enable

Enable user fsso-guest authentication.

disable

Disable user fsso-guest authentication.

kerberos-keytab

Kerberos keytab setting.

string

Maximum length: 35

method

Authentication methods.

option

-

Option

Description

ntlm

NTLM authentication.

basic

Basic HTTP authentication.

digest

Digest HTTP authentication.

form

Form-based HTTP authentication.

negotiate

Negotiate authentication.

fsso

Fortinet Single Sign-On (FSSO) authentication.

rsso

RADIUS Single Sign-On (RSSO) authentication.

ssh-publickey

Public key based SSH authentication.

cert

Client certificate authentication.

saml

SAML authentication.

name

Authentication scheme name.

string

Maximum length: 35

negotiate-ntlm

Enable/disable negotiate authentication for NTLM.

option

-

enable

Option

Description

enable

Enable negotiate authentication for NTLM.

disable

Disable negotiate authentication for NTLM.

require-tfa

Enable/disable two-factor authentication.

option

-

disable

Option

Description

enable

Enable two-factor authentication.

disable

Disable two-factor authentication.

saml-server

SAML configuration.

string

Maximum length: 35

saml-timeout

SAML authentication timeout in seconds.

integer

Minimum value: 30 Maximum value: 1200

120

ssh-ca

SSH CA name.

string

Maximum length: 35

user-cert

Enable/disable authentication with user certificate.

option

-

disable

Option

Description

enable

Enable client certificate field authentication.

disable

Disable client certificate field authentication.

user-database <name>

Authentication server to contain user information; "local" (default) or "123" (for LDAP).

Authentication server name.

string

Maximum length: 79

config authentication scheme

Configure Authentication Schemes.

config authentication scheme
    Description: Configure Authentication Schemes.
    edit <name>
        set domain-controller {string}
        set fsso-agent-for-ntlm {string}
        set fsso-guest [enable|disable]
        set kerberos-keytab {string}
        set method {option1}, {option2}, ...
        set negotiate-ntlm [enable|disable]
        set require-tfa [enable|disable]
        set saml-server {string}
        set saml-timeout {integer}
        set ssh-ca {string}
        set user-cert [enable|disable]
        set user-database <name1>, <name2>, ...
    next
end

config authentication scheme

Parameter

Description

Type

Size

Default

domain-controller

Domain controller setting.

string

Maximum length: 35

fsso-agent-for-ntlm

FSSO agent to use for NTLM authentication.

string

Maximum length: 35

fsso-guest

Enable/disable user fsso-guest authentication.

option

-

disable

Option

Description

enable

Enable user fsso-guest authentication.

disable

Disable user fsso-guest authentication.

kerberos-keytab

Kerberos keytab setting.

string

Maximum length: 35

method

Authentication methods.

option

-

Option

Description

ntlm

NTLM authentication.

basic

Basic HTTP authentication.

digest

Digest HTTP authentication.

form

Form-based HTTP authentication.

negotiate

Negotiate authentication.

fsso

Fortinet Single Sign-On (FSSO) authentication.

rsso

RADIUS Single Sign-On (RSSO) authentication.

ssh-publickey

Public key based SSH authentication.

cert

Client certificate authentication.

saml

SAML authentication.

name

Authentication scheme name.

string

Maximum length: 35

negotiate-ntlm

Enable/disable negotiate authentication for NTLM.

option

-

enable

Option

Description

enable

Enable negotiate authentication for NTLM.

disable

Disable negotiate authentication for NTLM.

require-tfa

Enable/disable two-factor authentication.

option

-

disable

Option

Description

enable

Enable two-factor authentication.

disable

Disable two-factor authentication.

saml-server

SAML configuration.

string

Maximum length: 35

saml-timeout

SAML authentication timeout in seconds.

integer

Minimum value: 30 Maximum value: 1200

120

ssh-ca

SSH CA name.

string

Maximum length: 35

user-cert

Enable/disable authentication with user certificate.

option

-

disable

Option

Description

enable

Enable client certificate field authentication.

disable

Disable client certificate field authentication.

user-database <name>

Authentication server to contain user information; "local" (default) or "123" (for LDAP).

Authentication server name.

string

Maximum length: 79