By default, FIC service is enabled on FGT VDOMs. So an FGT VDOM with a valid FIC license automatically becomes an application of FIC the moment it is created.

FIC supports up to four MFA methods, namely FTM, FTK, SMS, and email. The MFA method is set on a per-realm basis. The default method is FTM, but the admin user can change it to another method if needed. Sub-admins can then further change the MFA methods for end-users in their assigned realms to something other than the default (i.e., FTM). See Managing users for MFA methods used by end-users.