Global system configuration

FortiOS comes with a "config system global" command which enables the FortiGate admin to enable or disable FIC service on FortiGate. If FIC is disabled, all APIs to FIC will be disabled, except the "show" command under "execute fortitoken-cloud?". This provides a way to control the communication between the whole FortiGate device so that individual applications (VDOMs) will not be able to set up their connections or communicate with the remote FIC server.

By default, FIC is enabled in FortiOS. If it is disabled, you will not have the option of FIC service as an MFA method when configuring a user.

config system global
    set alias "FG101ETK00000000"
    set hostname "FG101ETK00000000"
    set fortitoken-cloud enable
    set switch-controller enable
    set timezone 04
end

This global configuration does not invoke any FortiGate-FortiIdentity Cloud API.