Skip to content
SPECIFICTION
Get listed

FortiAuthenticator

fortinet.com

WebLinuxAPISelf-hosted
Visit fortinet.com
Spec score 7.5 #33 of 52 in Multi-Factor Authentication Software

Spec sheet

Purpose
FortiAuthenticator provides identity and access management services for Fortinet products and third-party devices.Read 4 Oct 2026 · docs.fortinet.com
Deployment
The product is offered as physical or virtual appliances, as well as a FortiAuthenticator Cloud service.Read 4 Oct 2026 · docs.fortinet.com
Integrations
It integrates with third-party RADIUS, LDAP, and SAML systems and offers a REST API for external provisioning systems.Read 4 Oct 2026 · docs.fortinet.com
Security
FortiAuthenticator encrypts its file system and uses AES256-CBC encryption for secrets that it needs to access in plaintext operations.Read 4 Oct 2026 · docs.fortinet.com
Support
FortiAuthenticator-VM perpetual licensing lists support contracts separately, while the ordering guide lists FortiCare Elite with VM subscriptions and FortiCare Premium with Cloud subscriptions.Read 4 Oct 2026 · fortinet.com
Authentication
It provides RADIUS, TACACS+, LDAP, and SAML authentication methods.Read 4 Oct 2026 · docs.fortinet.com
Certificate management
It can create and sign digital certificates, including for use with FortiGate VPNs.Read 4 Oct 2026 · docs.fortinet.com
Free demo
Fortinet offers a free product demo covering user identification, single sign-on, two-factor authentication, identity sources, authentication methods, and the self-service portal.Read 4 Oct 2026 · fortinet.com
License limits
For VM licenses, the licensed user limit applies to local and remote user accounts and concurrent FSSO sessions, while other configuration-object limits are derived from the user limit.Read 4 Oct 2026 · docs.fortinet.com
MFA
Two-factor authentication supports one-time passwords using FortiToken hardware, FortiToken Mobile, SMS, or email.Read 4 Oct 2026 · docs.fortinet.com
SSO and federation
FortiAuthenticator can act as a SAML SSO identity provider or proxy and as an OIDC provider for single sign-on.Read 4 Oct 2026 · docs.fortinet.com
Subscription dependency
A FortiAuthenticator-VM subscription requires internet access to update.fortiguard.net, and its services stop if license validation connectivity is lost for 30 days.Read 4 Oct 2026 · docs.fortinet.com
User identification
It can identify users through Active Directory, desktop clients, guest portal logon, RADIUS accounting, Kerberos, and a REST API.Read 4 Oct 2026 · docs.fortinet.com
VM platforms
The ordering guide lists FortiAuthenticator-VM subscription and perpetual license options, with upgrades to expand VM user support beyond the 100-user base license.Read 4 Oct 2026 · fortinet.com

Plans and prices

FortiAuthenticator Cloud Price not published User subscription; license is valid for one year and must be activated within one year after purchase. 100–499 users · 500–1,999 users · 2,000–9,999 users · 10,000+ users · FortiCare Premium Support included Read 4 Oct 2026 · fortinet.com
FortiAuthenticator-VM Perpetual Price not published One-time purchase; support services are purchased separately. Base license supports 100 users · stackable upgrades available · HA nodes require separate licenses Read 4 Oct 2026 · fortinet.com
FortiAuthenticator-VM Subscription Price not published Term-based, per-user subscription; ordering guide lists FortiCare Elite Support as included. 100–999 users · 1,000–99,999 users · 100,000+ users Read 4 Oct 2026 · fortinet.com

Every FortiAuthenticator plan and price →

Where Specifiction places it

Alternatives to FortiAuthenticatorAll alternatives →