- Home
- Authenticator apps
- FortiAuthenticator
On the recordRead 4 Oct 202614 facts
FortiAuthenticator
Plans and prices
FortiAuthenticator Cloud
Priced on request
100–499 users · 500–1,999 users · 2,000–9,999 users · 10,000+ users
Read 4 Oct 2026 · fortinet.com
FortiAuthenticator-VM Perpetual
Priced on request
Base license supports 100 users · stackable upgrades available · HA nodes require separate licenses
Read 4 Oct 2026 · fortinet.com
FortiAuthenticator-VM Subscription
Priced on request
100–999 users · 1,000–99,999 users · 100,000+ users
Read 4 Oct 2026 · fortinet.com
On the record
- Authentication
- It provides RADIUS, TACACS+, LDAP, and SAML authentication methods.docs.fortinet.com · read 4 Oct 2026
- Certificate management
- It can create and sign digital certificates, including for use with FortiGate VPNs.docs.fortinet.com · read 4 Oct 2026
- Deployment
- The product is offered as physical or virtual appliances, as well as a FortiAuthenticator Cloud service.docs.fortinet.com · read 4 Oct 2026
- Free demo
- Fortinet offers a free product demo covering user identification, single sign-on, two-factor authentication, identity sources, authentication methods, and the self-service portal.fortinet.com · read 4 Oct 2026
- Integrations
- It integrates with third-party RADIUS, LDAP, and SAML systems and offers a REST API for external provisioning systems.docs.fortinet.com · read 4 Oct 2026
- License limits
- For VM licenses, the licensed user limit applies to local and remote user accounts and concurrent FSSO sessions, while other configuration-object limits are derived from the user limit.docs.fortinet.com · read 4 Oct 2026
- MFA
- Two-factor authentication supports one-time passwords using FortiToken hardware, FortiToken Mobile, SMS, or email.docs.fortinet.com · read 4 Oct 2026
- Purpose
- FortiAuthenticator provides identity and access management services for Fortinet products and third-party devices.docs.fortinet.com · read 4 Oct 2026
- Security
- FortiAuthenticator encrypts its file system and uses AES256-CBC encryption for secrets that it needs to access in plaintext operations.docs.fortinet.com · read 4 Oct 2026
- SSO and federation
- FortiAuthenticator can act as a SAML SSO identity provider or proxy and as an OIDC provider for single sign-on.docs.fortinet.com · read 4 Oct 2026
- Subscription dependency
- A FortiAuthenticator-VM subscription requires internet access to update.fortiguard.net, and its services stop if license validation connectivity is lost for 30 days.docs.fortinet.com · read 4 Oct 2026
- Support
- FortiAuthenticator-VM perpetual licensing lists support contracts separately, while the ordering guide lists FortiCare Elite with VM subscriptions and FortiCare Premium with Cloud subscriptions.fortinet.com · read 4 Oct 2026
- User identification
- It can identify users through Active Directory, desktop clients, guest portal logon, RADIUS accounting, Kerberos, and a REST API.docs.fortinet.com · read 4 Oct 2026
- VM platforms
- The ordering guide lists FortiAuthenticator-VM subscription and perpetual license options, with upgrades to expand VM user support beyond the 100-user base license.fortinet.com · read 4 Oct 2026
