FortiToken Cloud is Fortinet's Identity and Access Management as a Service (IDaaS solution, designed to enhance security by providing multi-factor authentication (MFA for users of Fortinet products such as FortiGate and FortiAuthenticator, as well as third-party web applications. This cloud-based service simplifies the deployment and management of MFA without the need for additional hardware or software, offering a scalable and intuitive platform accessible from anywhere via the internet. Key Features and Functionality: - Multiple Authentication Methods: Supports various token methods, including one-time passwords (OTP, SMS tokens, adaptive authentication, and passwordless authentication based on FIDO and FIDO2 specifications. - Easy Deployment and Management: Provides out-of-the-box interoperability with time-based OATH-compliant authentication servers like FortiAuthenticator and can be used directly with FortiGate Next-Generation Firewalls, including high availability configurations. - Variety of Token Form Factors: Offers multiple token options to meet diverse needs, such as FortiToken 410 (FIDO-certified USB security key, FortiToken Mobile (mobile application for iOS and Android, FortiToken 310 (USB device for client certificate-based authentication, and FortiToken 210 series (hardware tokens for strong authentication. - Adaptive Authentication: Utilizes parameters like IP address, time of day, and geographic location to assess login attempts, allowing for the bypassing of OTP authentication under certain conditions while rejecting riskier attempts. - IDP Proxy for SAML and OIDC Integration: Acts as a bridge connecting SAML Identity Providers with Service Providers, simplifying the management of multiple deployments and enabling seamless integration with existing SSO protocols. - SCIM Integration Support: Integrates with SCIM client applications, facilitating streamlined user provisioning and management. Primary Value and User Solutions: FortiToken Cloud addresses the critical need for robust security by mitigating risks associated with weak or compromised passwords through the implementation of MFA. By offering a cloud-based, scalable solution, it reduces the complexity and cost traditionally associated with MFA deployments. Organizations benefit from enhanced security, simplified management, and a seamless user experience, ensuring that only authorized users have access to sensitive data and systems.