FortiToken Cloud

Centralized token authentication is available in the cloud, as opposed to built into FortiGate or FortiAuthenticator, simplifying FortiToken management and provisioning.

To configure centralized token authentication in the cloud on the FortiGate:

1. Enable the FortiToken cloud service feature:

   config system global
       set fortitoken-cloud-service enable
   end

2. Assign the token to local users or administrators using the fortitoken-cloud option:

   config user local
       edit "test-cl3"
           set type password
           set two-factor fortitoken-cloud   
           set email-to .........
           ...
       next
   end

The following commands can be used to manage FortiCloud users:

Command	Description
diagnose ftk-cloud show users	Show all current users on the FortiToken Cloud server.
diagnose ftk-cloud delete user <username>	Delete the specified user from FortiToken Cloud.
diagnose ftk-cloud sync	Update the information on the FortiToken Cloud server after changing an email address or phone number on the FortiGate.
diagnose ftk-cloud server <server_ip>	Change the current FortiToken Cloud server. All FortiToken Cloud related operations on the FortiGate will be synchronized with the new server.