Local authentication
You can add, update, and delete local authentication settings.
Add local authentication settings
- Select local from the Auth Server Settings tree.
- Right-click in the local authentication table and select Create New.
- Enter values in the relevant fields. See Local authentication fields.
- Select Save.
Update local authentication settings
- Select local from the Auth Server Settings tree.
- Right-click a local user and select Edit.
- Update the values that you want to change.
- Select Save.
Delete local authentication settings
- Select local from the Auth Server Settings tree.
- Right-click a local user and select Delete.
- Select Yes in the confirmation dialog box to delete the local user.
Local authentication fields
The Create New user-local and Edit user-local forms contain the following fields:
|
Settings |
Guidelines |
|---|---|
|
Name |
Required. Enter the name of the local user. |
|
Auth Concurrent Override |
Enable or disable overriding the number of concurrent firewall use logins from the same user. |
|
Auth Concurrent Value |
The maximum number of concurrent logins permitted from the same user. |
|
Auth Timeout |
The number of minutes before the authentication timeout for a user is reached. |
|
Email-To |
Two-factor recipientʼs email address. |
|
FortiToken |
Two-factor recipientʼs FortiToken serial number. |
|
Id |
Local user ID. |
|
LDAP Server |
The name of the LDAP server with which the user must authenticate. |
|
Password |
Local userʼs password. |
|
Password Policy |
Password policy to apply to this user. |
|
PPK Identity |
Specify the Post-quantum Preshared Key (PKK) Identity for successful validation of PPK credentials in dynamic VPNs with peertype dialup. |
|
PPK Password |
IKEv2 Postquantum Preshared Key (ASCII string or hexadecimal encoded with a leading 0x). |
|
Radius Server |
The name of the RADIUS server with which the user must authenticate. |
|
SMS Custom Server |
Two-factor recipientʼs SMS server. |
|
SMS Phone |
Two-factor recipientʼs mobile phone number. |
|
SMS Server |
Send SMS through FortiGuard or other external server. |
|
Status |
Enable or disable allowing the local user to authenticate with the FortiGate unit. |
|
TACACS+ Server |
The name of the TACACS+ server with which the user must authenticate. |
|
Two-Factor |
Disable two-factor authentication or choose which two-factor authentication method is used: fortitoken—FortiToken disable—disable sms—SMS authentication code. email—Email authentication code. |
|
Type |
Required. Select the authentication method. password—Password authentication. ldap—LDAP server authentication. tacacs+—TACACS+ server authentication. radius—RADIUS server authentication. |
|
Workstation |
If you want to limit the user to authenticate only from a particular workstation, enter the name of the remote user workstation |