Configuring FortiToken Mobile

FortiToken Mobile is an OATH compliant, event-based and time-based OTP generator for mobile devices. FortiToken Mobile produces its OTP codes in an application that you can download onto your Android or iOS mobile device without the need for a physical token.

FortiToken Mobile allows you to install multiple tokens for multi-factor authentication (MFA).

You can download the free FortiToken Mobile application for Android from the Google Play store, and for iOS from the Apple App Store.

After your system administrator assigns your token, you receive a notification with an activation code and expiry date via SMS or email. If you do not activate your token by the expiry date, you must contact your system administrator so that they can reassign your token for activation.

The following instructions describe procedures when using FortiToken Mobile for iOS on an iPhone. Procedures may vary depending on your device and OS.

To activate a Fortinet or third-party token:

1. On your device, open FortiToken Mobile. If this is your first time opening the application, it may prompt you to create a PIN for secure access to the application and tokens.

   

2. Do one of the following:
   1. If you received your notification via email, select + and use the device camera to scan the token QR code in your email.

      

   2. If you received your notification via SMS, select Enter Manually, then select Fortinet or Other to add the token as a third-party token. In the Name field, enter your email address. In the Key field, enter the activation key. Select Done.

      

3. FortiToken Mobile provisions and activates your token and generates token codes immediately. To view the OTP's digits, select the eye icon. After you open the application, FortiToken Mobile generates a new six-digit OTP every 30 seconds. All configured tokens display on the app's homescreen.

   

The MFA process commonly involves: Something you know: User password Something you have: The FortiToken OTP A third factor of authentication may also be added to the authentication process: Something you are: Your fingerprint or face

To use FortiToken Mobile tokens:

1. Open FortiToken Mobile.
2. Tap and hold on the OTP code to copy the OTP.
3. Go to where you need to present the token's OTP, such as the FortiClient VPN client or an online portal page.
4. Paste the OTP and log in to pass the 2FA authentication process.