FortiGate / FortiOS

FortiManager

FortiAnalyzer

Admin Guide

Introduction
Dashboard
- Main menu
- FortiCloud
  - Logging into an OU account
  - Launching FortiIdentity Cloud
User Management
- Users
- User Groups
- Realms
- Administrators
Applications
- FortiProducts
- Web
- Management
- SCIM
- SSO
- End-User Portals
Authentication
- User Source
  - Using Google social login as user source
  - Support for LDAP/AD user source
- Domain Mapping
- Example 7: Secure authentication for LDAP user source via ZTNA server
Security Devices
- Mobile Token
- Hardware Token
- Passkey
Monitor
- IdP Sessions
- Endpoints
  - Viewing details of an endpoint
  - Removing an endpoint
Log and Report
- Usage
- Authentication Logs
- Management Logs
- SMS Logs
- Orders
Customization
- Templates
- Branding
Settings
- Global
- Realm
- Alarm
  - Creating a user quota alarm
  - Creating an SMS credit balance alarm
- Alarm Routing
  - Configuring receiver groups
  - Configuring receivers
- Adaptive Authentication
- Certificates
Licenses
- Viewing license information
- Purchasing licenses with FortiPoints
Use cases
- One Token shared by different applications
- Changing separate tokens to a single token
- Independent token
- Auto-Alias features—using the same email address
- Splitting user quota among different realms
- FIC account lockout (2FA)
- Managing access to FIC
- Controlling risky conditions
- Synchronizing LDAP remote users in wildcard user group from FortiGate
- Transferring devices on FIC
- ZTNA HTTPS access proxy with FIC MFA
- Adding FIC MFA to remote access IPsec VPN
- Configuring FIC as Microsoft Entra external multifactor authentication service provider
- MFA authentication context handling
- Configuring FIC as the IdP proxy for FortiSASE
- FortiIdentity Cloud as OIDC provider
- SCIM use case
- SSO and IdP user sources
Licensing and availability
- Subscription licensing
- Free licenses
- SMS licensing
- License consumption for passthrough users
- Licensing for accounts with FortiSASE licenses
- Email notification on license balance status
Support for EU GDPR
Quickstart guide
- Getting started—FGT-FIC users
- Getting started—FAC-FIC users
Compatibility
- Compatible Fortinet applications
- Supported browsers
Important notes
- Trial account API request limit
- The same token for the same user on multiple applications
- A single FIC user in multiple applications
- Admin accounts and realms
- Supported OTP hard tokens
- Supported FIDO security key
- No SMS MFA with FAC as LDAP server
- FAC users' name issues on FIC GUI
- How to use FortiClient
- Enabling/Disabling FIC end users in FortiGate
- Account disablement and closure
Product documentation
FAQs
Release history
Technical support
Change log

Home FortiIdentity Cloud 26.2.0 Admin Guide

26.2.0

Resource rules

FortiIdentity Cloud license only

For a licensed account, when the total purchased user quota is x among the licenses, the related resource quota is calculated as follows:

Resource	Quota
Users	x
Realms	If x ≤ 500, then x; if x > 500, then 500 + x/10
Applications (Web, Management, SCIM, SSO, and End User Portal) combined	Maximum (x/10, 5)
User Sources	Maximum (x/10, 5)
Certificates	Maximum (x/10, 5)
Branding	Maximum (x/10, 5)
Domains	Maximum (x/10, 5)
User Groups	Maximum (x/10, 5)
Profile	100
Policies	200

x/10 will truncate any decimal places if the result is not an integer. For example, if x = 49, x/10 is counted as 4.
For realms, if the total purchased user quota is x and x is equal to or less than 500, the maximum number of realms allowed is also x; if the total purchased user quota is greater than 500, the maximum number of realms allowed is 500 + x/10. For example, if user quota is 400, the maximum number of realms allowed is 400; if user quota is 600, the maximum number of realms allowed is 560.
For maximum (x/10, 5), if the total purchased user quota is x, the maximum number of the target resource is the greater value between x/10 and 5. For example, if user quota is 40, the maximum number of the target resource is 5; if user quota is 60, the maximum number of the target resource is 6.

FortiIdentity Cloud license and FortiSASE license

Licensed FortiSASE customers will automatically get a user quota in FIC that matches their FortiSASE license user quota along with quotas for five applications, two user sources, and three realms for the duration of the FortiSASE license. When existing licensed FortiSASE customers log into the FIC Portal, these quota will be automatically updated.

When licensed FortiSASE customers purchase an FIC license, their free quota will be combined with their paid FIC license quota. For example, if you have a FortiSASE license for 150 users and an FIC license for 120 users, you will have the following resources at your disposal:

Resources	FortiSASE	FortiIdentity Cloud	Final rule
User	150	120	The two combined.
Application	5	12	The greater of the two.
User source	2	12	The greater of the two.
Realm	3	120	The greater of the two.

Of the combined quota, only 150 users are able to use the FortiSASE application.

FortiIdentity Cloud license and FortiClient Standalone license

Resources	FortiClient	FortiIdentity Cloud	Final rule
User	150	120	The two combined
Application	Maximum (x/10, 5)	12	The greater of the two
User Source	2	12	The greater of the two
Realm	150	120	The greater of the two

Resource rules

FortiIdentity Cloud license only

For a licensed account, when the total purchased user quota is x among the licenses, the related resource quota is calculated as follows:

Resource	Quota
Users	x
Realms	If x ≤ 500, then x; if x > 500, then 500 + x/10
Applications (Web, Management, SCIM, SSO, and End User Portal) combined	Maximum (x/10, 5)
User Sources	Maximum (x/10, 5)
Certificates	Maximum (x/10, 5)
Branding	Maximum (x/10, 5)
Domains	Maximum (x/10, 5)
User Groups	Maximum (x/10, 5)
Profile	100
Policies	200

x/10 will truncate any decimal places if the result is not an integer. For example, if x = 49, x/10 is counted as 4.
For realms, if the total purchased user quota is x and x is equal to or less than 500, the maximum number of realms allowed is also x; if the total purchased user quota is greater than 500, the maximum number of realms allowed is 500 + x/10. For example, if user quota is 400, the maximum number of realms allowed is 400; if user quota is 600, the maximum number of realms allowed is 560.
For maximum (x/10, 5), if the total purchased user quota is x, the maximum number of the target resource is the greater value between x/10 and 5. For example, if user quota is 40, the maximum number of the target resource is 5; if user quota is 60, the maximum number of the target resource is 6.

FortiIdentity Cloud license and FortiSASE license

Resources	FortiSASE	FortiIdentity Cloud	Final rule
User	150	120	The two combined.
Application	5	12	The greater of the two.
User source	2	12	The greater of the two.
Realm	3	120	The greater of the two.

Of the combined quota, only 150 users are able to use the FortiSASE application.

FortiIdentity Cloud license and FortiClient Standalone license

Resources	FortiClient	FortiIdentity Cloud	Final rule
User	150	120	The two combined
Application	Maximum (x/10, 5)	12	The greater of the two
User Source	2	12	The greater of the two
Realm	150	120	The greater of the two

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Unified SASE

Single Vendor SASE

Cloud Network Security

Secure Endpoint Connectivity

Web Application / API Protection

Security Operations

Security Operations Automation

Identity

Early Detection & Prevention

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Communication & Surveillance

Unified SASE

Single Vendor SASE

Secure Endpoint Connectivity

Cloud Network Security

Cloud-Native Security

Web Application / API Protection

Security Operations

Security Operations Automation

Endpoint

Data Protection

Identity

Email

Early Detection & Prevention

Expert Services

Edge Firewall

Orchestration & management

SD Branch

Application Delivery

Single Vendor SASE

Secure Endpoint Connectivity

Secure Private Access

Thin Edge

Identity

Application Gateway

Enterprise Asset Management

Endpoint Agent

Agentless Security Posture

Identity

Wireless

Switching

Identity

Privilege Acccess Management

Next Generation Firewall

Orchestration & management

Expert Services

Web Application / API Protection

All

All

Account Management

SAAS Management

SAAS Application Security

Managed Services

Platform as a service (PAAS)

Other SAAS Services

4D Pillars

Cloud

Popular Solutions

All Products

Admin Guide

Resource rules

Resource rules

FortiIdentity Cloud license only

FortiIdentity Cloud license and FortiSASE license

FortiIdentity Cloud license and FortiClient Standalone license

Resource rules

Resource rules

FortiIdentity Cloud license only

FortiIdentity Cloud license and FortiSASE license

FortiIdentity Cloud license and FortiClient Standalone license