An OT administrator has configured FSSO and local firewall authentication. A user who is part of a user group is not prompted for credentials during authentication. What is a possible reason?

Question

Options

• AFortiGate determined the user by passive authentication
• BThe user was determined by Security Fabric
• CTwo-factor authentication is not configured with RADIUS authentication method
• DFortiNAC determined the user by DHCP fingerprint method

• A
  75% (24)
• B
  3% (1)
• C
  16% (5)
• D
  6% (2)

Explanation

Fortinet Single Sign-On (FSSO) includes a method called passive authentication. This allows FortiGate to identify and authenticate a user based on their existing Windows login session without prompting the user again for credentials. Because of this passive authentication, the user will not see a prompt for credentials when accessing resources protected by FortiGate. This behavior is expected in FSSO deployments where FortiGate can retrieve user login information from the domain controller or through the FSSO agent. The other options (Security Fabric, two-factor with RADIUS, FortiNAC DHCP fingerprint) are less relevant to this scenario or would not explain the lack of prompt during authentication.

No community discussion yet for this question.