Upgrade, restore, backup, reboot, and shutdown are available via FortiTrust Identity portal.

System > Dashboard

System > Dashboard > Status

Device FQDN is read-only.

• FortiToken Hardware and FortiToken Mobile are not available.

• New FortiToken Cloud related option displays number of allowed, assigned, and available users in FortiToken Cloud.

Total FortiTrust Identity SMS quota shown on the FortiTrust Identity portal.

System > Network

System > Administration

• Public IP/FQDN for FortiToken Mobile field is not available.

• HTTPS Certificate and CA certificate that issued the server certificate dropdowns are locked with Default-Server-Certificate and Fortinet_CA1_Root respectively.

Managed via FortiTrust Identity portal.

Managed via FortiTrust Identity portal.

The following replacement messages are not available:

• FortiToken Request Email Subject

• FortiToken Request Email Message

• FortiToken Mobile Activation Email Subject

• FortiToken Mobile Activation Email Message

• FortiToken Mobile Activation SMS Message

• FortiToken Mobile Transfer Email Subject

• FortiToken Mobile Transfer Email Message

FortiAuthenticator Cloud uses FortiToken Cloud via REST API for SMS services.

FortiAuthenticator Cloud uses FortiToken Cloud SMTP server for email services.

Authentication

FortiTrust Identity supports FortiAuthenticator Agents for Microsoft Windows and OWA.

However, offline tokens are not supported for the FortiAuthenticator Agent for Microsoft Windows. Offline tokens support will be added in a future version.

Note: FortiAuthenticator agents cannot be downloaded from FortiAuthenticator Cloud.

To download FortiAuthenticator agents:

1. Log in to FortiCloud.
2. In the Support dropdown, select Firmware Download.
3. In the Select Product dropdown, select FortiAuthenticator.
4. Select Download and click the FACAgent folder.
5. In the FACAgent folder, download the FAC_Agent_Setup_vX.X.exe file for FortiAuthenticator Agents for Microsoft Windows, and save the file to your computer.

   Download the FAC_IIS_Agent_Setup_vX.X.exe file for FortiAuthenticator Agent for Microsoft OWA, and save the file to your computer.

6. Open the file to install.

   For information on installing the agents, see the FortiAuthenticator Agent for Microsoft Windows Install Guide and the FortiAuthenticator Agent for Microsoft OWA Install Guide on the Fortinet Docs Library.

Authentication > User Account Policies

Managed via FortiToken Cloud.

Authentication > User Management

• FortiToken Cloud for all OTP authentication.

Note: You can now disable both Password authentication and One-Time Password (OTP) authentication.

• When editing a local user, the following options are not available:

  • Allow RADIUS authentication

  • Role

  • Allow LDAP browsing

  • TACACS+

• FortiToken Cloud for all OTP authentication.

Note: You can now disable both Password authentication and One-Time Password (OTP) authentication.

TACACS+ authorization rule and RADIUS Attributes not available.

FortiToken Cloud for all OTP authentication.

Authentication > Portals > Policies

Requires RADIUS.

Authentication > Portals > Portals

Non-FortiToken Cloud options are not available.

Non-FortiToken Cloud options are not available.

Authentication > User Management > Remote User Sync Rules

Only FortiToken Cloud and None (users are synced explicitly with no token-based authentication) options are available.

FortiToken Cloud is used for Adaptive Authentication management.

Advanced options in self-service portal and OAuth policies are not available.

Authentication > SAML IdP > Service Providers

Fortinet SSO Methods > SSO

/radiusclients/

/radiuspolicies/

/radiuspolicyclient/

/tacplusclients/

/tacpluspolicies/

/tacpluspolicyclient/

/fortitokens/

/localusers/[id]/radiusattributes/

/localapiadmin/

/pushauth/

/pushauthresp/

/system/external_ip_fqdn/

/fortiguardmessages/

/fortitokenmobilelicenses/

/smtpservers/

/upgrade/

/recovery/

/scheduledbackupsettings/

/ftpservers/

/logsettings/

/licensing/