Creating connectors with OAuth 2.0 token-based authentication

EMS supports a connector type that uses OAuth 2.0 token-based authentication. When you create an OAuth 2.0 connector, EMS generates a client ID and secret for use by the Fortinet product on the other side of the connector. You can integrate EMS with the following Fortinet products:

• FortiADC
• FortiAnalyzer
• FortiData
• FortiDeceptor
• FortiEDR
• FortiManager
• FortiSIEM
• FortiToken Cloud
• FortiWeb

To create a connector with OAuth 2.0 token-based authentication:

1. Go to Fabric & Connectors > Fabric Devices.

   

2. Click Add. The Add OAuth 2.0 Fabric Connector dialog displays.

3. From the Connector Type dropdown list, select the desired Fortinet product to integrate with EMS.

   

4. Do one of the following:
   1. If you are configuring a connector for FortiData, configure the following:
      1. In the FortiData Hostname / IP address field, enter the FortiData IP address.
      2. In the FortiData Port field, enter 8443.
      3. In the FortiData REST API Key field, paste the key that you created in FortiData.
   2. Otherwise, configure the following:

      1. Enter the Serial Number.

         

      2. Enter the VDOM, if desired.

5. Click Next.

6. Select the Role. The EMS admin role selected defines which EMS APIs (and therefore, features) that the Fabric device connector can access. For example, a Fabric connector that is configured with the Standard administrator role can access EMS APIs for endpoint and policy permissions and has read-only permissions to settings permissions. See Admin roles. Click Finish.

   

7. Enter the Token Lifetime.

   

   After the Token Lifetime is expired, the token is can no longer be authorized. The default value is 3600 seconds and the minimum value is 60 seconds.

8. Enter the Alias, if desired.

9. Click Finish. The Client ID and Client Secret are generated.

   

10. Copy the Client ID and Client Secret.

11. Click Close. A confirmation dialog is displayed.

    

12. Click Yes.

    The Client ID and Client Secret can be used by other Fortinet devices that support OAuth 2.0 Fabric connector features to call FortiClient EMS APIs.