FortiAuthenticator is a centralized identity and access management solution within the Fortinet Security Fabric. Its three primary functions are:

1. Identity Management: It serves as a central point for managing user identities, providing authentication, authorization, and accounting (AAA) services. It integrates with various directories like LDAP and Active Directory and supports numerous authentication methods, including two-factor authentication with FortiTokens.

2. Portal Services: It offers customizable captive portals for various use cases, including guest management, social Wi-Fi logins, and user self-service for password resets or device registration.

3. Certificate Authority (CA): It can function as a local CA to issue, manage, and validate digital certificates for users and devices, which is critical for secure network access methods like 802.1X EAP-TLS and VPNs.

D. Log server: FortiAuthenticator generates logs for its own events but is not designed as a primary log aggregation and analysis server like FortiAnalyzer.

E. RSSO server: While FortiAuthenticator can function as a RADIUS Single Sign-On (RSSO) server, this is a specific SSO feature. The chosen options represent broader, more fundamental capabilities of the platform.

1. FortiAuthenticator 6.5.0 Administration Guide

"Introduction

" Page 7: "FortiAuthenticator is the gatekeeper of the Fortinet Security Fabric

providing centralized

secure two-factor authentication and identity management... FortiAuthenticator is the Certificate Authority for the Security Fabric

managing the certificate lifecycle for all of the other Fabric elements." This supports options A and C.

2. FortiAuthenticator Datasheet

Page 1: The datasheet highlights key features under "Highlights

" including "Guest and contractor management with customizable captive portals

" "Certificate management for the enterprise (CA)

" and "Secure access management with two-factor authentication

RADIUS

LDAP

802.1X

and SAML." This directly supports options A

B

and C.

3. Fortinet Certified Professional - FortiAuthenticator 6.4 Study Guide

"Introduction to FortiAuthenticator

" Page 6: This official study guide outlines the core functions

stating

"FortiAuthenticator is a centralized authentication server... It can also be used as a certificate authority (CA)... FortiAuthenticator also provides guest management services through its captive portal." This confirms A

B

and C as key features.