Fortinet FortiIdentity™ Cloud
Identity and Access Management (IAM) from the Cloud

Overview:

Identity and Access Management (IAM) from the Cloud

FortiIdentity Cloud (formerly FortiToken Cloud) is a powerful access management solution that offers broad functionality to help you protect your resources from being accessed by anyone except those users that are authenticated and authorized for access. FortiIdentity Cloud provides strong security without sacrificing user productivity, easily managed from the cloud.

Many of today’s most damaging security breaches have been due to compromised user accounts and passwords. Businesses of all sizes are looking to move beyond passwords alone to authenticate users. Single Sign On is critical for end user convenience and productivity but can also lead to more risk exposure if not implemented correctly. Multifactor Authentication, (MFA) whether with traditional hardware tokens, or increasingly through mobile software tokens or FIDO passkeys, has become the new normal. In the past, implementing and managing MFA deployments could be complex. FortiIdentity Cloud offers a secure, effective way to manage SSO and MFA through an easy to use, intuitive interface that can be securely accessed from anywhere. FortiIdentity Cloud is a full-featured IAM service that offers local Identity Provider (IdP) and IdP Proxy capabilities and includes tokens for our free FortiToken Mobile App with Push notification and response technology, simplifying the end user multifactor experience to a simply swipe or click to approve login.

Local IdP and IdP Proxy
You can use FortiIdentity Cloud as your standalone IdP for SAML and OIDC applications as well as for proxying to a remote SAML or OIDC Provider. Synchronize with remote directories via SCIM or API.

Centrally Managed MFA for FortiGate and Other Applications
You can configure and manage MFA for one or many FortiGates and other Fortinet security appliances as well as third party applications, all from a secure web interface. FortiIdentity Cloud offers additional features specifically for use by Managed Security Service Providers

Simplify Administration and Deployment, Increase Ease of Use
An intuitive web interface and FortiToken Mobile Tokens included, FortiIdentity Cloud reduces licensing and deployment complexity.

No Additional Hardware or Software Required
Designed to simply add MFA to FortiGate users’ login process, FortiIdentity Cloud Service requires no changes in security policies or ACLs.

Ease of Provisioning and Scaling Up or Down
With daily usage reports, email notifications of nearing subscription expiration, and flexible renewal methods, you are always in control of the status of your deployment.

Highlights:

Simple to Deploy and Manage

Whether using FortiIdentity Cloud for SSO or just for MFA, FortiIdentity Cloud IAM is easy to deploy and provides strong protection for your resources as well as convenience for your end users. It acts as a trusted intermediary to verify user identities and grant access to various websites or applications and simplifies user access while enhancing security by reducing the need to manage multiple passwords.

FortiIdentity Cloud works with FortiGate and other Fortinet and third-party web-based applications for adding MFA to the login flow and does not interfere with the initial username and password login process. There is no additional hardware or software required.

It is easily configured in FortiGate and does not require you to add or change existing security policies. For a non-Fortinet environment, any authenticated web application can use FortiIdentity Cloud MFA service by calling its APIs or integrating using SAML or OIDC.

From the intuitive dashboard you can quickly assess the number of active users, your SMS balance, and the number of days until expiration. The system will alert you if your account is near expiration to prevent any interruption of service.

Pricing

FortiIdentity Cloud is a subscription service available through the purchase of time-based user licenses. Licenses are consumed based on the number of users per year. It includes 125 SMS credits per user with an option to purchase additional SMS credits. All licenses are stackable with co-term renewals. FortiIdentity Cloud can easily expand as your needs change

Scalable

Administrators can manage IAM from anywhere there is an internet connection. As a Fortinet hosted service, FortiIdentity Cloud combines high availability, disaster recovery, and performance necessary for the most demanding enterprises

FortiIdentity Cloud is designed for the segmentation necessary for Managed Service Providers to create IAM offerings for their individual clients. Users and applications can be spread across the world or in the same data center and be part of the same managed group.

Data Privacy and Security

For compliance with regulations like GDPR, you can choose specific regional hosting sites to keep all your FortiIdentity Cloud data. Your data is stored based on best practices for keeping cloud data safe and segregated from other customers.

FortiToken Mobile and FIDO Passkeys

The mobile application has revolutionized multi-factor authentication. Now with almost any mobile device (iPhone, Android, Windows) your end users can download and utilize FortiToken Mobile. Offering superior ease of use and without additional hardware other than their mobile device, users now can utilize multi-factor with just the swipe or click of a finger to accept the secure token. FortiIdentity Cloud is also a FIDO2 Provider, meaning your end users can use FIDO anti-phishing technology for authentication to the IdP or IdP proxy.

FortiIdentity Cloud Features:

Highly Available Secure Managed Service

• Hosted in Fortinet Data Center
• 24/7 monitoring
• Realm support to effectively allocate resources and better manage end users
• Local IdP/IdP Proxy (SAML, OIDC)
• SCIM real time user and group provisioning
• Multiple MFA options: FortiToken Mobile, email, SMS, and FortiToken (hardware token)
• FIDO2 Passkeys

---

FortiToken Mobile

• One-time token codes generated by mobile application
• Operate without cell service or WiFi connection
• FortiToken Mobile Push
• Support for iPhone, Android, and Windows platforms
• Secure cross-platform token transfer for iOS and Android devices
• Login details pushed to phone for one-tap approve or deny
• Simple app install and activation

---

IdP/MFA Service Integrated with FortiGate and Other Products

• Protect local and remote FortiGate admin, firewall, and VPN users
• Open API to use with any web-based application
• Integration with FortiGate, FortiAuthenticator, FortiPAM, FortiSandbox, FortiADC and other Fortinet products out of the box
• No additional hardware or software to purchase, install, and maintain
• Add users automatically from FortiGate and other Fortinet products
• Add users directly from third party applications via CSV, API, or SCIM
• Remote user support

Documentation:

Download the Fortinet FortiIdentity Cloud Datasheet (PDF).

Download the FortiToken Ordering Guide (PDF).