Document
Library

Admin guide

Introduction
Acronyms and abbreviations
Main features
Licensing and availability
- Time-based subscriptions
- Credit-based subscriptions
  - Transition to time-based subscriptions
- FortiTrust-identity licensing
- SMS licensing
Architecture
Compatibility
- Compatible Fortinet applications
- Supported browsers
Important notes
- Credit-based licenses no longer available for purchase
- Use of non-officially supported FOS
- The same token for the same user on multiple auth clients
- FOS 6.2.3 and 6.4.0 CLI differences
- Admin accounts and realms
- Supported hard tokens
- No SMS MFA with FAC as LDAP server
- A single FTC user in multiple auth clients
- FAC users' name issues on FTC GUI
- How to use FortiClient
- Local vs. global disable/delete
QuickStart guide
FortiToken Mobile
- Supported FortiToken Mobile apps
- Activate FTM tokens
- Activate third-party tokens
- Use FTM tokens
Use cases
- One Token shared by different auth clients
- Change separate tokens to a single token
- Independent token
- Auto-Alias features—Use the same email address
- Split user quota to different realms
- FTC account lockout (2FA)
- Manage access to FTC
- Control risky conditions
- Switch from Fortitoken to FortiToken Cloud (FTC) lockout
- Migrate FTM tokens to FortiToken Cloud
Auth clients
- Getting started—FGT-FTC users
- Getting started—FAC-FTC users
- Transfer auth client (FC account lockout)
- Replace an old FortiGate with a new one
- Auth clients in HA mode
- Synchronize LDAP remote users in wildcard user group from FortiGate
- Email notification on license balance status
Maintenance
- Add, sync, and delete users
- Add, sync, and delete auth clients (devices)
- Service debug
Settings
- Global
- Realm
- Templates
FortiToken Cloud GUI
- Launch FortiToken Cloud
- FortiCloud
- Dashboard
- Administrators
- Users
- Realms
- FortiProducts
- Web Apps
- Devices (HA)
- Mobile Tokens
- Hardware Tokens
- Usage
- Licenses
- Adaptive authentication
- Logs
Product documentation and support
- Create an SMS credit balance alert event
FOS CLI commands for FortiToken Cloud
- Global system configuration
- Access FTC management commands
- Configure admin users
- Configure local users
- Configure local LDAP users for FTC service
- Configure wildcard LDAP users for FTC service
- Configure local RADIUS users for FTC service
- Migrate FTM tokens to FortiToken Cloud
- Diagnose FortiToken Cloud
FAQs
Release history
Technical support
Change log

Home FortiToken Cloud Admin guide

No SMS MFA with FAC as LDAP server

Copy Link

Copy Doc ID 1843b2fc-5b95-11ed-96f0-fa163e15d75b:995081

Download PDF

No SMS MFA with FAC as LDAP server

FortiToken Cloud (FTC) does not support SMS MFA authentication for end-users configured on FortiAuthenticator as a native LDAP server, because a FortiAuthenticator native LDAP server does not allow FTC to query users' phone numbers. Therefore, FTC does support SMS MFA for FortiAuthenticator end-users configured as remote users in a remote LDAP server.

Previous

Next

No SMS MFA with FAC as LDAP server

FortiToken Cloud (FTC) does not support SMS MFA authentication for end-users configured on FortiAuthenticator as a native LDAP server, because a FortiAuthenticator native LDAP server does not allow FTC to query users' phone numbers. Therefore, FTC does support SMS MFA for FortiAuthenticator end-users configured as remote users in a remote LDAP server.

Previous

Next