Fortinet Document Library
Version:
6.4.3
6.4.2
6.4.1
Version:
6.4.0
6.3.3
6.3.2
Version:
6.3.1
6.3.0
6.2.1
Version:
6.2.0
6.1.2
6.1.1
Version:
6.1.0
6.0.7
6.0.6
Version:
6.0.5
6.0.4
6.0.3
Version:
6.0.2
6.0.1
6.0.0
Version:
5.5.0
5.4.0
5.3.0
Version:
5.2.0
5.1.0
5.0.0
Version:
4.3.0
4.2.1
4.2.0
Table of Contents
What's new in FortiAuthenticator
FortiAuthenticator 6.3.2
FortiAuthenticator 6.3.1
FortiAuthenticator 6.3.0
Introduction
Before you begin
How this guide is organized
Registering your Fortinet product
Setup
Initial setup
FortiAuthenticator-VM setup on VMware
Administrative access
Adding FortiAuthenticator to your network
Maintenance
Backing up the configuration
Upgrading the firmware
Licensing
Swapping hard disks
Platform migration
CLI commands
Troubleshooting
FortiAuthenticator settings
FortiGate settings
System
Dashboard
Customizing the dashboard
System information widget
System resources widget
Authentication activity widget
User inventory widget
License information widget
Disk monitor widget
Top user lockouts widget
User lookup
Power supply monitor widget
Network
Interfaces
DNS
Static routing
Packet capture
Administration
System access
High availability
Firmware upgrade
Configuring auto-backup
SNMP
Features
Licensing
FortiGuard
FortiNACs
FTP servers
Admin profiles
NetHSMs
Replacement messages
Messaging
SMTP servers
Email services
SMS gateways
Authentication
What to configure
Password-based authentication
Two-factor authentication
Two-factor token and password concatenation
Authentication servers
RADIUS
Built-in LDAP
Remote LDAP
Authentication methods
Machine authentication
User account policies
General
PCI DSS 3.2 two-factor authentication
Lockouts
Passwords
Custom user fields
Tokens
User management
Administrators
Local users
Remote users
Remote user sync rules
Guest users
User groups
Usage profile
Realms
FortiTokens
MAC devices
Identity and Account Management (IAM)
RADIUS attributes
FortiToken physical device and FortiToken Mobile
FortiAuthenticator and FortiTokens
Monitoring FortiTokens
FortiToken device maintenance
FortiToken Mobile licenses
Portals
Portals
Policies
Captive portal policies
Self-service portal policies
Access points
FortiWLC Pinholes
Replacement messages
Smart Connect profiles
Remote authentication servers
General
LDAP
RADIUS
OAUTH
SAML
RADIUS service
Clients
Policies
Certificates
Services
Custom dictionaries
TACACS+ service
Creating policies
Adding clients
Creating authorization rules
Assigning authorization rules
LDAP service
General
Directory tree overview
Creating the directory tree
Configuring a FortiGate unit for FortiAuthenticator LDAP
OAuth Service
Settings
Applications
SAML IdP
General
Replacement messages
Service providers
FortiAuthenticator agents
FortiAuthenticator Agent for Microsoft Windows
FortiAuthenticator Agent for Outlook Web Access
Legacy self-service portal
General
Access control
Self-registration
Token self-provisioning
Device self-enrollment
Port-based network access control
Extensible Authentication Protocol
Non-compliant devices
Fortinet Single Sign-On
General settings
Portal services
SAML authentication
Windows event log sources
RADIUS accounting sources
Syslog sources
Fine-grained controls
SSO users and groups
Domain groupings
FortiGate filtering
IP filtering rules
Tiered architecture
FortiClient SSO Mobility Agent
RADIUS Single Sign-On
RADIUS accounting proxy
Monitoring
SSO
Domains
SSO sessions
Windows event log sources
FortiGates
DC/TS agents
NTLM statistics
Authentication
Locked-out users
RADIUS sessions
Windows AD
Windows device logins
Learned RADIUS users
SAML IdP sessions
Certificate management
Policies
End entities
Certificate authorities
Local CAs
Certificate revocations lists
Trusted CAs
SCEP
General
Enrollment requests
Logging
Log access
Log configuration
Audit reports
Troubleshooting
Troubleshooting
Debug logs
LDAP filter syntax
Change Log
Home
FortiAuthenticator 6.3.2
Administration Guide
Administration Guide
What's new in FortiAuthenticator
FortiAuthenticator 6.3.2
FortiAuthenticator 6.3.1
FortiAuthenticator 6.3.0
Introduction
Before you begin
How this guide is organized
Registering your Fortinet product
Setup
Initial setup
FortiAuthenticator-VM setup on VMware
Administrative access
Adding FortiAuthenticator to your network
Maintenance
Backing up the configuration
Upgrading the firmware
Licensing
Swapping hard disks
Platform migration
CLI commands
Troubleshooting
FortiAuthenticator settings
FortiGate settings
System
Dashboard
Customizing the dashboard
System information widget
System resources widget
Authentication activity widget
User inventory widget
License information widget
Disk monitor widget
Top user lockouts widget
User lookup
Power supply monitor widget
Network
Interfaces
DNS
Static routing
Packet capture
Administration
System access
High availability
Firmware upgrade
Configuring auto-backup
SNMP
Features
Licensing
FortiGuard
FortiNACs
FTP servers
Admin profiles
NetHSMs
Replacement messages
Messaging
SMTP servers
Email services
SMS gateways
Authentication
What to configure
Password-based authentication
Two-factor authentication
Two-factor token and password concatenation
Authentication servers
RADIUS
Built-in LDAP
Remote LDAP
Authentication methods
Machine authentication
User account policies
General
PCI DSS 3.2 two-factor authentication
Lockouts
Passwords
Custom user fields
Tokens
User management
Administrators
Local users
Remote users
Remote user sync rules
Guest users
User groups
Usage profile
Realms
FortiTokens
MAC devices
Identity and Account Management (IAM)
RADIUS attributes
FortiToken physical device and FortiToken Mobile
FortiAuthenticator and FortiTokens
Monitoring FortiTokens
FortiToken device maintenance
FortiToken Mobile licenses
Portals
Portals
Policies
Captive portal policies
Self-service portal policies
Access points
FortiWLC Pinholes
Replacement messages
Smart Connect profiles
Remote authentication servers
General
LDAP
RADIUS
OAUTH
SAML
RADIUS service
Clients
Policies
Certificates
Services
Custom dictionaries
TACACS+ service
Creating policies
Adding clients
Creating authorization rules
Assigning authorization rules
LDAP service
General
Directory tree overview
Creating the directory tree
Configuring a FortiGate unit for FortiAuthenticator LDAP
OAuth Service
Settings
Applications
SAML IdP
General
Replacement messages
Service providers
FortiAuthenticator agents
FortiAuthenticator Agent for Microsoft Windows
FortiAuthenticator Agent for Outlook Web Access
Legacy self-service portal
General
Access control
Self-registration
Token self-provisioning
Device self-enrollment
Port-based network access control
Extensible Authentication Protocol
Non-compliant devices
Fortinet Single Sign-On
General settings
Portal services
SAML authentication
Windows event log sources
RADIUS accounting sources
Syslog sources
Fine-grained controls
SSO users and groups
Domain groupings
FortiGate filtering
IP filtering rules
Tiered architecture
FortiClient SSO Mobility Agent
RADIUS Single Sign-On
RADIUS accounting proxy
Monitoring
SSO
Domains
SSO sessions
Windows event log sources
FortiGates
DC/TS agents
NTLM statistics
Authentication
Locked-out users
RADIUS sessions
Windows AD
Windows device logins
Learned RADIUS users
SAML IdP sessions
Certificate management
Policies
End entities
Certificate authorities
Local CAs
Certificate revocations lists
Trusted CAs
SCEP
General
Enrollment requests
Logging
Log access
Log configuration
Audit reports
Troubleshooting
Troubleshooting
Debug logs
LDAP filter syntax
Change Log
6.3.2
6.4.3
6.4.2
6.4.1
6.4.0
6.3.3
6.3.2
6.3.1
6.3.0
6.2.1
6.2.0
6.1.2
6.1.1
6.1.0
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
6.0.0
5.5.0
5.4.0
5.3.0
5.2.0
5.1.0
5.0.0
4.3.0
4.2.1
4.2.0
Download PDF
Copy Link
Maintenance
System
maintenance tasks include:
Backing up the configuration
Upgrading the firmware
Licensing
Swapping hard disks
Platform migration
Maintenance
System
maintenance tasks include:
Backing up the configuration
Upgrading the firmware
Licensing
Swapping hard disks
Platform migration
Link
PDF
TOC