Fortinet black logo

Administration Guide

Guest users

Guest users

Guest user accounts can be created as needed. Guest users are similar to local users, only they are created with a restricted set of attributes.

To manage guest user accounts, go to Authentication > User Management > Guest Users.

Users can be authenticated against local or remote user databases with single sign-on using client certificates or SSO (Kerberos/SAML).

Common use cases might include:

  • Hotel receptionists creating room accounts
  • Office staff creating visitor accounts

Newly created account information can be sent to users via email, SMS, or printed out individually.

To create a new guest user/multiple guest users:
  1. Go to Authentication > User Management > Guest Users and select Create New.
  2. Enter the following information:
    note iconThe "Sponsor" role for local and remote users is equivalent to an administrator with Read-Write permissions to the Guest Users sub-menu only.
    General
    Creation Mode

    There are three guest user creation methods:

    • Express: Quickly create guest user accounts without the need to enter any user information.
      Guest accounts generated this way only have four attributes: Sponsor, Username (eight random lowercase letters—must be unique from any other existing user account), Password, and Expiry.
    • From CSV file: Create guest user accounts using information from a CSV file in the following format: <first name>, <last name>, <email>, <mobile>, <group>.
    • Manual Input: Create guest user accounts by manually entering the user attributes for each guest user.
    Expiry dateSet the date that the guest user account(s) will expire.
    Expiry timeSet the time that the guest user account(s) will expire. The time can either be manually entered, or defined from four options: Now, Midnight, 6 a.m., or Noon.
    ExpressThe following is only available when Creation Mode is set to Express.
    Number of new guest usersNumber of new guest users to add, up to a maximum of 1000.

    Sponsor

    When an admin creates a guest user account, the admin selects the sponsor from the dropdown. Sponsors do not have this capability. This option is only available when the admin creates a guest user account.

    When a sponsor creates a guest user account, the guest user is automatically assigned to the sponsor creating it.

    GroupsChoose user groups from the list available to assign the new guest users.
    CSV ImportThe following is only available when Creation Mode is set to From CSV file.
    CSV fileChoose a CSV file to import the user attributes.
    Guest Basic Information The following is only available when Creation Mode is set to Manual Input.
    Add Guest UserManually enter guest user information, including their First name, Last name, Email address, Mobile number, Groups, and Actions. Choose user groups from the list available to assign the new guest users.
  3. Click OK.

    The Export Guest User window opens with the following options:

    Print

    Print the guest user information.

    Email

    Select to open the Send Guest User Credential Via Email window, enter the Email, and select Send.

    Export

    Select to export the guest user information as a CSV file.

    SMS

    Select the SMS icon to open the Send Guest User Credential Via SMS window, enter the mobile phone number, and select Send.

  4. Click OK to add the guest user.

When editing a guest user:

  • The password is obfuscated by default. Upon clicking, the password is visible. Reclicking the password obfuscates it again.

  • The Reset Password button assigns a new password to the guest user and displays the password.

Guest users

Guest user accounts can be created as needed. Guest users are similar to local users, only they are created with a restricted set of attributes.

To manage guest user accounts, go to Authentication > User Management > Guest Users.

Users can be authenticated against local or remote user databases with single sign-on using client certificates or SSO (Kerberos/SAML).

Common use cases might include:

  • Hotel receptionists creating room accounts
  • Office staff creating visitor accounts

Newly created account information can be sent to users via email, SMS, or printed out individually.

To create a new guest user/multiple guest users:
  1. Go to Authentication > User Management > Guest Users and select Create New.
  2. Enter the following information:
    note iconThe "Sponsor" role for local and remote users is equivalent to an administrator with Read-Write permissions to the Guest Users sub-menu only.
    General
    Creation Mode

    There are three guest user creation methods:

    • Express: Quickly create guest user accounts without the need to enter any user information.
      Guest accounts generated this way only have four attributes: Sponsor, Username (eight random lowercase letters—must be unique from any other existing user account), Password, and Expiry.
    • From CSV file: Create guest user accounts using information from a CSV file in the following format: <first name>, <last name>, <email>, <mobile>, <group>.
    • Manual Input: Create guest user accounts by manually entering the user attributes for each guest user.
    Expiry dateSet the date that the guest user account(s) will expire.
    Expiry timeSet the time that the guest user account(s) will expire. The time can either be manually entered, or defined from four options: Now, Midnight, 6 a.m., or Noon.
    ExpressThe following is only available when Creation Mode is set to Express.
    Number of new guest usersNumber of new guest users to add, up to a maximum of 1000.

    Sponsor

    When an admin creates a guest user account, the admin selects the sponsor from the dropdown. Sponsors do not have this capability. This option is only available when the admin creates a guest user account.

    When a sponsor creates a guest user account, the guest user is automatically assigned to the sponsor creating it.

    GroupsChoose user groups from the list available to assign the new guest users.
    CSV ImportThe following is only available when Creation Mode is set to From CSV file.
    CSV fileChoose a CSV file to import the user attributes.
    Guest Basic Information The following is only available when Creation Mode is set to Manual Input.
    Add Guest UserManually enter guest user information, including their First name, Last name, Email address, Mobile number, Groups, and Actions. Choose user groups from the list available to assign the new guest users.
  3. Click OK.

    The Export Guest User window opens with the following options:

    Print

    Print the guest user information.

    Email

    Select to open the Send Guest User Credential Via Email window, enter the Email, and select Send.

    Export

    Select to export the guest user information as a CSV file.

    SMS

    Select the SMS icon to open the Send Guest User Credential Via SMS window, enter the mobile phone number, and select Send.

  4. Click OK to add the guest user.

When editing a guest user:

  • The password is obfuscated by default. Upon clicking, the password is visible. Reclicking the password obfuscates it again.

  • The Reset Password button assigns a new password to the guest user and displays the password.