This checkbox only applies to users who use FTM for MFA. It enables you to select a user, and then click the NEW FTM TOKEN button to request a new FTM token for the user. See Getting a new FTM token.

The username of the user.

The status of the user, which can be a combination of any of the following:

• (active)—The user is enabled.

Note: By default, all new users are enabled to use FIC for MFA. The FIC administrator can click this button to quickly deactivate a user when necessary. For more information, see the following bullet.

• (disabled)—This button enables the administrator to temporarily stop the user from using FIC.

Note: If a user is disabled, FIC will deny all log-in requests from the user. It must be noted that disabling a user only prevents the user from using FIC, but does not remove the user from your account. FIC will continue counting it toward your user quota for the user until the user is removed from your account. The admin user can also click this button to enable the user if the user is disabled.

• (locked)—The user is locked out.

Note: FIC locks a user out when the user has exceeded the specified maximum number of log-in attempts allowed. See Managing realm settings.

• (unlocked)—The user is unlocked.

Note: FIC automatically unlocks users based on their lockout settings. The admin user can also manually unlock a locked user by clicking the (locked) button.

• (Temporary token deactivated)—Temporary token is deactivated.

  (Temporary token activated)— Temporary token is activated.

• (pending)—A token assigned to the user has not been activated yet.
• (expired)—The user's token activation code has expired.
• (bypass)—The user is allowed to bypass MFA.
• (no bypass)—The user is not allowed to bypass MFA.

Note: The admin user can enable MFA bypass on a user from here only if Enable Bypass is enabled on the Settings page. See Managing realm settings. Otherwise, when you click the (no bypass) icon, a tool tip will appear asking you to turn on Enable Bypass on the Settings page.

The MFA method used by the user, which can be one of the following:

• FTM (soft token)
• Email
• SMS
• FTK (FortiToken, a hardware token)

The method by which FIC sends FTM token activation/transfer notifications to the user, which can be either of the following:

• Email—FIC sends FTM token activation/transfer notifications to the user's email address.
• SMS—FIC sends FTM token activation/transfer notifications by SMS to the user's mobile phone.

Note: If the user's notification method is set to SMS, make sure that the mobile phone number in the system is valid, and that you have enough credits in your account to send OTPs by SMS. For more information, see Managing realm settings.

The user's email address.

Note: The admin user is able to edit users' email addresses.

The user's mobile phone number, if available.

Note: The phone number must be in the format of "+ Country Code Area Code Phone Number", e.g., +1 4082221234. You can edit an end-user's mobile phone numbers.

The realm where the user resides.

User type: remote or local

The number of applications with referenced to the user.

The timestamp of the user's last successful login.