Enabling/Disabling FIC end-users on FortiGate

If you have end-users with FortiIdentity Cloud for 2FA enabled on a FortiGate, they will remain on the FIC portal if you disable them on the FortiGate because FIC keeps a record of its end users regardless of the their status on FGT. If you want to remove the end users from the FIC portal, you must do one of the following:

• Delete the end users from the FGT.

• Revoke the tokens from the end users.

• Delete the end users from the FIC portal (Note: This method does not delete the end users on the FGT, so it is best to delete them from the FGT.)