FCP_FAC_AD-6.5 FCP - FortiAuthenticator 6.5 Administrator Questions and Answers

Validating other CA CRLs using OCSP

Merging local and remote CRLs using SCEP

Importing other CA certificates and CRLs

Creating, signing, and revoking of X.509 certificates

It allows FortiAuthenticator to message end users using the FortiClient for SSO.

It forces FortiClient users to use two-factor authentication when using FortiClient for SSO.

It prevents users from authenticating to an unauthorized AD server.

It enables tracking and recording all authentications performed through FortiClient.

Identity management device

Portal services

Certificate authority

Log server

RSSO server

Email

LinkedIn

Microsoft Live

WhatsApp

Principal contacts identity provider and authenticates, identity provider relays principal to service provider after valid authentication

Service provider contacts identity provider, identity provider validates principal for service provider, service provider establishes communication with principal

Principal contacts identity provider and is redirected to service provider, principal establishes connection with service provider, service provider validates authentication with identity provider

Principal contacts service provider, service provider redirects principal to identity provider, after successful authentication identity provider redirects principal to service provider

A private key is not generated for a local root certificate.

For security reasons, a local root certificate includes OCSP responder information for automatic key retrieval.

There should never be a need to export the private key.

The certificate includes the private key for a local root certificate.