FortiAuthenticator user self-registration

1. Creating a self-registration user group

Go to Authentication > User Management > User Groups and create a new user group for self-registering users.

Enter a Name and select OK. Users will be added to this group once they register through the self-registration portal.

2. Enabling self-registration 

Go to Authentication > Self-service Portal > General.

Enter a Site name, add an Email signature that you would like appended to the end of outgoing emails, and select OK.

3. Enabling self-registration  

Enable Require administrator approval and Enable email to freeform addresses, and enter the administrator’s email address in the field provided.

Enable Place registered users into a group, select the user group created earlier, and configure basic account information to be sent to the user by Email.

Open the Required Field Configuration dropdown and enable First name, Last name, and Email address.

4. Creating a new SMTP server

Enter a Name, the IP address of the FortiAuthenticator, and leave the default port value (25).

Enter the administrator’s email address, Account username, and Password.

Note that, for the purpose of this recipe, Secure connection will not be set to STARTTLS, as a signed CA certificate would be required.

Once created, highlight the new server and select Set as Default.

The new SMTP server will now be used for future user registration.

5. Results — Self-registration

When the user visits the login page, https://<FortiAuthenticator-IP>/auth/register/, they can click the Register button, where they will be prompted to enter their information.

They will need to enter and confirm a Username, Password, First name, Last name, and Email address. These are the only required fields, as configured in the FortiAuthenticator earlier.

Select Submit.

the user will receive an activation welcome email.

The user’s login information will be listed.

The user is now logged into their account where they can review their information.

As recommended in the user’s welcome email, the user may change their password. However, this is optional.

6. Results — Administrator approval

In the administrator’s email account, open the user’s Approval Required email. The user’s full name will appear in the email’s subject, along with their username in the emai’s body.

Select the link to approve or deny the user.

The link will take you to the New User Approval page, where you can review the user’s information and either approve or deny the user’s full registration.

Select Approve.

The user has now been approved and activated by the administrator.

This can be confirmed by going back to Authentication > User Management > Local Users. The user’s Status has changed to Enabled.

7. Verifying the results