Fortinet black logo

CLI Reference

config authentication scheme

config authentication scheme

Configure Authentication Schemes.

config authentication scheme

Description: Configure Authentication Schemes.

edit <name>

set method {option1}, {option2}, ...

set negotiate-ntlm [enable|disable]

set kerberos-keytab {string}

set domain-controller {string}

set saml-server {string}

set saml-timeout {integer}

set fsso-agent-for-ntlm {string}

set require-tfa [enable|disable]

set fsso-guest [enable|disable]

set user-cert [enable|disable]

set user-database <name1>, <name2>, ...

set ssh-ca {string}

next

end

config authentication scheme

Parameter

Description

Type

Size

Default

method

Authentication methods .

option

-

Option

Description

ntlm

NTLM authentication.

basic

Basic HTTP authentication.

digest

Digest HTTP authentication.

form

Form-based HTTP authentication.

negotiate

Negotiate authentication.

fsso

Fortinet Single Sign-On (FSSO) authentication.

rsso

RADIUS Single Sign-On (RSSO) authentication.

ssh-publickey

Public key based SSH authentication.

cert

Client certificate authentication.

saml

SAML authentication.

negotiate-ntlm

Enable/disable negotiate authentication for NTLM .

option

-

enable

Option

Description

enable

Enable negotiate authentication for NTLM.

disable

Disable negotiate authentication for NTLM.

kerberos-keytab

Kerberos keytab setting.

string

Maximum length: 35

domain-controller

Domain controller setting.

string

Maximum length: 35

saml-server

SAML configuration.

string

Maximum length: 35

saml-timeout

SAML authentication timeout in seconds.

integer

Minimum value: 30 Maximum value: 1200

120

fsso-agent-for-ntlm

FSSO agent to use for NTLM authentication.

string

Maximum length: 35

require-tfa

Enable/disable two-factor authentication .

option

-

disable

Option

Description

enable

Enable two-factor authentication.

disable

Disable two-factor authentication.

fsso-guest

Enable/disable user fsso-guest authentication .

option

-

disable

Option

Description

enable

Enable user fsso-guest authentication.

disable

Disable user fsso-guest authentication.

user-cert

Enable/disable authentication with user certificate .

option

-

disable

Option

Description

enable

Enable client certificate field authentication.

disable

Disable client certificate field authentication.

user-database <name>

Authentication server to contain user information; "local" (default) or "123" (for LDAP).

Authentication server name.

string

Maximum length: 79

ssh-ca

SSH CA name.

string

Maximum length: 35

config authentication scheme

Configure Authentication Schemes.

config authentication scheme

Description: Configure Authentication Schemes.

edit <name>

set method {option1}, {option2}, ...

set negotiate-ntlm [enable|disable]

set kerberos-keytab {string}

set domain-controller {string}

set saml-server {string}

set saml-timeout {integer}

set fsso-agent-for-ntlm {string}

set require-tfa [enable|disable]

set fsso-guest [enable|disable]

set user-cert [enable|disable]

set user-database <name1>, <name2>, ...

set ssh-ca {string}

next

end

config authentication scheme

Parameter

Description

Type

Size

Default

method

Authentication methods .

option

-

Option

Description

ntlm

NTLM authentication.

basic

Basic HTTP authentication.

digest

Digest HTTP authentication.

form

Form-based HTTP authentication.

negotiate

Negotiate authentication.

fsso

Fortinet Single Sign-On (FSSO) authentication.

rsso

RADIUS Single Sign-On (RSSO) authentication.

ssh-publickey

Public key based SSH authentication.

cert

Client certificate authentication.

saml

SAML authentication.

negotiate-ntlm

Enable/disable negotiate authentication for NTLM .

option

-

enable

Option

Description

enable

Enable negotiate authentication for NTLM.

disable

Disable negotiate authentication for NTLM.

kerberos-keytab

Kerberos keytab setting.

string

Maximum length: 35

domain-controller

Domain controller setting.

string

Maximum length: 35

saml-server

SAML configuration.

string

Maximum length: 35

saml-timeout

SAML authentication timeout in seconds.

integer

Minimum value: 30 Maximum value: 1200

120

fsso-agent-for-ntlm

FSSO agent to use for NTLM authentication.

string

Maximum length: 35

require-tfa

Enable/disable two-factor authentication .

option

-

disable

Option

Description

enable

Enable two-factor authentication.

disable

Disable two-factor authentication.

fsso-guest

Enable/disable user fsso-guest authentication .

option

-

disable

Option

Description

enable

Enable user fsso-guest authentication.

disable

Disable user fsso-guest authentication.

user-cert

Enable/disable authentication with user certificate .

option

-

disable

Option

Description

enable

Enable client certificate field authentication.

disable

Disable client certificate field authentication.

user-database <name>

Authentication server to contain user information; "local" (default) or "123" (for LDAP).

Authentication server name.

string

Maximum length: 79

ssh-ca

SSH CA name.

string

Maximum length: 35