Overview

FortiToken Mobile Push Authentication provides a secure and convenient way to approve VPN login requests without entering a six-digit code each time. When logging into the SCF VPN, you will receive a notification on your mobile device asking you to approve the login. If you do not receive the notification, you can still log in using the six-digit code displayed in the FortiToken Mobile app.

Important Security Reminder:

Only approve connection requests for VPN connections you know you initiated. If you did not initiate the connection, deny the request and notify the IT Help Desk.

When in doubt, deny.

Steps

Troubleshooting

Best Practices

Steps

Before You Begin - Ensure you have: a smartphone (iPhone or Android), Internet access (Wi-Fi or Cellular), the FortiToken Mobile app installed, and your FortiToken activation email from SCF.

1. Activate Your FortiToken (if you haven't already)
   1. Open the FortiToken activation email sent by SCF IT.
   2. Tap Activate Your Token.
   3. Install the FortiToken Mobile app if prompted.
   4. Open the app.
   5. Tap Scan Barcode.
   6. Scan the QR code or choose Enter Manually and enter the activation code.
   7. Your token is now ready to use.
2. Enable Notifications
   • iPhone: Settings > Notifications > FortiToken Mobile > Allow Notifications. Enable Lock Screen, Notification Center, Banners, and Sounds.
   • Android: Settings > Apps > FortiToken Mobile > Notifications > Allow Notifications.
3. Connect to the VPN
   • ​Open FortiClient VPN, select the SCF VPN connection, enter your username and password, then click Connect.
4. Approve the Login
   • When the push notification appears, tap it, unlock your phone if prompted, and tap Approve. Your VPN connection will complete automatically.

Example of Push Authentication Notification:

This is an example of the push notification you will receive on your mobile device. Review the details and tap Approve only if you initiated the VPN connection.

Troubleshooting

Verify Internet access and notification settings. Retry if notifications are delayed. If you accidentally tap Deny, reconnect to generate a new request. Ensure your phone date and time are set
automatically.

Unexpected Notification

If you receive a push notification that you did not initiate, tap Deny and immediately notify the SCF IT Help Desk.

No Push Notification

Verify Internet connectivity, confirm notifications are enabled, wait 10–15 seconds, retry the connection, or use the backup six-digit code.

Backup Six-Digit Code

Open the FortiToken Mobile app, locate your SCF token, and enter the current six-digit code when prompted. The code changes every 30 seconds.

Best Practices

Keep notifications enabled, keep the app updated, never approve unexpected login requests, never share your token, and secure your phone with Face ID, Touch ID, fingerprint, or PIN.