Connecting to VPN with MFA




Push notification

If you use the MFA mobile app to approve log ins:

  1. Enter your username and password into the FortiClient VPN application and press connect.
  2. You should receive a notification on your default mobile device from the MFA mobile app asking to approve your connection to the VPN service. Select approve to complete your VPN connection.

If you have more than one mobile device registered into MFA, you can specify that you want the notification to be sent to your second device instead. You can do this by adding ,push2 after your password within the password field of FortiClient. For example you would enter yourpassword,push2 to direct the notification to your second mobile device. Note the comma (without spaces) required between your password and the word push2.

Note: If you ever receive a notification for a VPN connection attempt that you weren't expecting, press Deny to reject the request. You’ll be given the option to report it as fraudulent, or you can tap It was a mistake to deny the request without reporting it.




Hardware token and mobile passcodes

Passcodes allow you to perform MFA, even when your mobile device is without an internet connection. You can access passcodes either from a hardware token or the MFA mobile app.

If you have been issued with a hardware token:

  1. Press the button on your hardware token to generate a new passcode. You will use this passcode as part of your password when connecting to the VPN (step 3).
  2. Enter your username into the FortiClient application.
  3. Within the password field, enter your University password followed by a comma and the passcode generated in step 1. For example yourpassword,passcode
  4. Press connect.

If you use the MFA mobile app but your device does not currently have an internet connection:

  1. Open up the MFA app and tap the down indicator to get a one-time passcode to use. You will use this passcode as part of your password when connecting to the VPN (step 3).
  2. Enter your username into the FortiClient application.
  3. Within the password field, enter your University password followed by a comma and the passcode previously generated in step 1. For example yourpassword,passcode
  4. Press connect.

For more information on generating passcodes within the MFA mobile app please review the operating system guidance for your mobile device.




Telephone callback

If you are enrolled in MFA with your telephone number because you have not been issued with a hardware token, or your device is not compatible with the MFA mobile app. You can specify to receive a telephone call in order to perform the secondary level of authentication:

  1. Open up the FortiClient application on your device and enter your username into the FortiClient application.
  2. Within the password field, enter your University password followed by a comma and the word phone. For example yourpassword,phone
  3. Press connect.
  4. You will receive an automated telephone call from our MFA provider asking you to verify the connection attempt. Press 1 on your telephone keypad to approve this and complete your connection to VPN.

Note: If you ever receive a telephone callback for a VPN connection attempt that you weren't expecting, press 3 on your telephone keypad to reject the request.




SMS passcode

If you are enrolled in MFA with your telephone number because you have not been issued with a hardware token, or your device is not compatible with the app. You can specify to receive an SMS text message containing a one time passcode in order to perform the secondary level of authentication:

  1. Open up the FortiClient application on your device and enter your username into the FortiClient application.
  2. Within the password field, enter your University password followed by a comma and the word sms. For example yourpassword,sms
  3. Press connect. The initial connection attempt to connect to the VPN service will at this point fail, however, you will receive an SMS text message containing a passcode.
  4. Return to the FortiClient application and within the password field, enter your University password followed by a comma and the passcode sent to you via SMS text message. For example yourpassword,passcode
  5. Press connect.