Transfer auth client (FC account lockout)

If one of your account owners has left your organization, the associated account will be locked out. If you still want to keep using the auth client which was registered under the locked account, you can transfer the ownership of the auth client from one FC account to another FC account.

Use case

You can transfer the FortiGate to a new account from the FortiGate GUI, and then log into the FTC GUI with the new FC account to validate the device ownership from the Device Transfer page of the FTC portal. If the validation result shows there are auth clients under the previous FC account, you need to choose to delete the auth clients from the previous FC account.

The auth client clean-up will take some time, so validate the device again until the device has been transferred to the new FC account. All users with FTC MFA on the FGT can be synced to FTC and the end-users need to be re-activated with a new token if you want to keep the users on the FGT. Otherwise, delete the FTC users on FGT and use it as a new auth device with FTC.

For more information, see Devices (HA).