Enterprise Network Identity Policy
Network and Internet access is key for almost every role within the enterprise; however, this requirement must be balanced with the risk that it brings. The key objective of every enterprise is to provide secure but controlled network access enabling the right person the right access at the right time, without compromising on security.
Fortinet Single Sign-On is the method of providing secure identity and role-based access to the Fortinet connected network. Through integration with existing Active Directory or LDAP authentication systems, it enables enterprise user identity-based security without impeding the user or generating work for network administrators.
FortiAuthenticator builds on the foundations of Fortinet Single Sign-on, adding a greater range of user identification methods and greater scalability. FortiAuthenticator is the gatekeeper of authorization into the Fortinet secured enterprise network identifying users, querying access permissions from third party systems, and communicating this information to FortiGate devices for use in Identity-Based Policies.
Features
- Enables identity and role-based security policies in the Fortinet secured enterprise network without the need for additional authentication through integration with Active Directory
- Strengthens enterprise security by simplifying and centralizing the management of user identity information
- Secure Multi-factor/OTP Authentication with full support for FortiToken
- RADIUS and LDAP Authentication
- Certificate management for enterprise VPN deployment
- IEEE802.1X support for wired and wireless network security
- SAML SP/IdP Web SSO
- OpenID Connect SSO
- FIDO2 Features
Also known as Passwordless authentication, FIDO2 is another Strong Authentication technique allowing use of strong single factor (passwordless), two-factor, and multi-factor authentication for added protection
