FortiAuthenticator side configuration
Before proceeding, ensure that you have configured your FortiAuthenticator and that you have created a
NAS entry for your FortiManager and created/imported FortiTokens. For more information, see the FortiAuthenticator Interoperability Guide and FortiAuthenticator Administration Guide available in the Fortinet Document Library.
Create a local user:
1. Go to Authentication > UserManagement > Local Users.
2. Select Create New in the toolbar.
The Create New User page opens.
Create new user page

Configure the following settings:
Username Type a user name for the local user.
Password creation Select Specify a password from the drop-down list.
Password Type a password. The password must be a minimum of 8 characters.
Password confirmation Type the password again. The passwords must match.
Enable account expiration Optionally, select to enable account expiration. For more information see the FortiAuthenticator Administration Guide.
3. Select OK to continue. The Change user page opens.
Change User

Configure the following settings:
Disabled Select to disable the local user.
Password-based authentication Leave this option selected. Select [Change Password] to change the password for this local user.
Token-based authentication Select to enable token-based authentication.
Deliver token code by Select to deliver token by FortiToken.
FortiToken 200 Select the FortiToken from the drop-down list.
Enable account expiration Optionally, select to enable account expiration. For more information see the FortiAuthenticator Administration Guide.
User Role
Role Select either Administrator or User.
Allow RADIUS authen-
tication Select to allow RADIUS authentication.
Allow LDAP browsing Optionally, select to allow LDAP browsing. For more information see the FortiAuthenticator Administration Guide.
Select OK to save the setting.
Create a RADIUS client:
1. Go to Authentication > RADIUS Service > Clients.
2. Select Create New in the toolbar.