Freedom251 › Multi-Factor Authentication Software
FortiAuthenticator
What FortiAuthenticator is
FortiAuthenticator provides identity and access management for Fortinet products and third-party devices. It supports RADIUS, TACACS+, LDAP, and SAML authentication, and can operate as a SAML single sign-on identity provider or proxy and as an OIDC provider. Two-factor authentication can use one-time passwords from FortiToken hardware or mobile, SMS, or email; supported factors also include passwords and FIDO2 security keys. User identification can use Active Directory, desktop clients, guest portal logon, RADIUS accounting, Kerberos, or a REST API. The product creates and signs digital certificates, including for FortiGate VPNs, and integrates with external RADIUS, LDAP, and SAML systems. Deployment options are physical appliances, virtual appliances, or FortiAuthenticator Cloud. VM licensing is subscription or perpetual; Cloud uses a user subscription. FortiAuthenticator encrypts its file system and uses AES256-CBC for secrets. Pricing is available on request, and Fortinet offers a free product demo.
Who it suits
It suits organizations managing authentication and identity sources across Fortinet and third-party environments. It is relevant to teams needing MFA, SSO, certificate management, or appliance and cloud deployment choices.
What it does well
- RADIUS, TACACS+, LDAP, and SAML support
- SAML and OIDC single sign-on roles
- Multiple MFA factors, including FIDO2
- Physical, virtual, and cloud deployment
- REST API and certificate management
What to know first
- Pricing available only on request
- VM subscriptions require license-validation connectivity
- Perpetual support services are purchased separately
- Cloud licenses are valid for one year
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| FortiAuthenticator-VM Subscription | Term-based, per-user subscription; ordering guide lists FortiCare Elite Support as included. · 100–999 users · 1,000–99,999 users · 100,000+ users | On request |
| FortiAuthenticator-VM Perpetual | One-time purchase; support services are purchased separately. · Base license supports 100 users · stackable upgrades available · HA nodes require separate licenses | On request |
| FortiAuthenticator Cloud | User subscription; license is valid for one year and must be activated within one year after purchase. · 100–499 users · 500–1,999 users · 2,000–9,999 users · 10,000+ users · FortiCare Premium Support included | On request |
As fortinet.com lists them, read 4 Oct 2026. The maker's own page has the final word.
Verdict
FortiAuthenticator covers authentication, federation, MFA, identity sources, and certificates across several deployment models. Licensing dependencies and separate support arrangements should be reviewed during procurement.
Facts from FortiAuthenticator's own pages
- Authentication
- It provides RADIUS, TACACS+, LDAP, and SAML authentication methods. · docs.fortinet.com, 4 Oct 2026
- Certificate management
- It can create and sign digital certificates, including for use with FortiGate VPNs. · docs.fortinet.com, 4 Oct 2026
- Deployment
- The product is offered as physical or virtual appliances, as well as a FortiAuthenticator Cloud service. · docs.fortinet.com, 4 Oct 2026
- Free demo
- Fortinet offers a free product demo covering user identification, single sign-on, two-factor authentication, identity sources, authentication methods, and the self-service portal. · fortinet.com, 4 Oct 2026
- Integrations
- It integrates with third-party RADIUS, LDAP, and SAML systems and offers a REST API for external provisioning systems. · docs.fortinet.com, 4 Oct 2026
- License limits
- For VM licenses, the licensed user limit applies to local and remote user accounts and concurrent FSSO sessions, while other configuration-object limits are derived from the user limit. · docs.fortinet.com, 4 Oct 2026
- MFA
- Two-factor authentication supports one-time passwords using FortiToken hardware, FortiToken Mobile, SMS, or email. · docs.fortinet.com, 4 Oct 2026
- Purpose
- FortiAuthenticator provides identity and access management services for Fortinet products and third-party devices. · docs.fortinet.com, 4 Oct 2026
- Security
- FortiAuthenticator encrypts its file system and uses AES256-CBC encryption for secrets that it needs to access in plaintext operations. · docs.fortinet.com, 4 Oct 2026
- SSO and federation
- FortiAuthenticator can act as a SAML SSO identity provider or proxy and as an OIDC provider for single sign-on. · docs.fortinet.com, 4 Oct 2026
- Subscription dependency
- A FortiAuthenticator-VM subscription requires internet access to update.fortiguard.net, and its services stop if license validation connectivity is lost for 30 days. · docs.fortinet.com, 4 Oct 2026
- Support
- FortiAuthenticator-VM perpetual licensing lists support contracts separately, while the ordering guide lists FortiCare Elite with VM subscriptions and FortiCare Premium with Cloud subscriptions. · fortinet.com, 4 Oct 2026
- User identification
- It can identify users through Active Directory, desktop clients, guest portal logon, RADIUS accounting, Kerberos, and a REST API. · docs.fortinet.com, 4 Oct 2026
- VM platforms
- The ordering guide lists FortiAuthenticator-VM subscription and perpetual license options, with upgrades to expand VM user support beyond the 100-user base license. · fortinet.com, 4 Oct 2026
Where FortiAuthenticator stands on Freedom251
- Multi-Factor Authentication Software#29 of 52
- Authenticator apps#98 of 111