Using Two-Step Login with the Admin VPN (FortiClient)


When you connect to the Admin VPN service protected by two-step login, you will be presented with an additional field on the authentication screen after entering your username and password and will need to complete the two-step login process. 


What does the authentication prompt look like?

Example of Admin VPN Duo two-step authentication prompt

What authentication methods can I use with the Admin VPN through the FortiClient app?

You will need to enter an appropriate value into the Answer field and potentially complete another step in order to log in.

The different methods available to log in are:

  • Duo Push - Push a login request to your phone (if you have Duo Mobile installed and activated on your smart device). Just review the request and tap Approve to log in.
  • Phone call - Authenticate via phone callback.
  • SMS - Request a new batch of SMS passcodes. You can then authenticate with one of the newly delivered passcodes.
  • Passcode - Log in using a passcode, either generated with Duo Mobile, sent via SMS, generated by your hardware token, or provided by an administrator.

What should I enter in the Answer field for each kind of option?

Numbers for each option and the total available options may vary depending on what devices you have set up as authentication methods in Duo.

Examples of the prompts and what you would enter are:

Authentication type

Console prompt option

What should be entered

Short prompt option

What should be entered

Duo Push

1. Duo Push to XXX-XXX-XXXX

1 push1 push1
Phone call 2. Phone call to XXX-XXX-XXXX 2 phone1 phone1
SMS 3. SMS passcodes to XXX-XXX-XXXX 3 sms1 sms1
Passcode No specific prompt option a numeric passcode from an app, token, or SMS message No specific prompt option a numeric passcode from an app, token, or SMS message



Article ID: 127986
Fri 2/12/21 2:16 PM
Fri 3/17/23 4:24 PM