Introduction
FortiAuthProxy is a software application that adds multi-factor authentication (MFA) support to common authentication protocols such as LDAP. It’s an OVA file that can be installed on a VMware ESXi server.
-
Frontend client — Firewall/VPN gateway managing LDAP authentication or generic LDAP client.
-
FortiAuthProxy — The LDAP proxy software of this project.
-
Backend LDAP server — Microsoft Active Directory (AD) or OpenLDAP.
-
Backend MFA services — FortiIdentity Cloud (FIC).
When a frontend client sends an authentication request, it first goes to FortiAuthProxy. FortiAuthProxy then checks the user's credentials with the backend LDAP server. If the credentials are correct, it forwards the request to the backend MFA service, which is FIC. The user can then approve the auth by either pushing with FMT or entering their token to complete the authentication process.