Fortra Single Login and Identity Provider Frequently Asked Questions

Key features and benefits include:

• Single Sign-On (SSO): Users can log in once and gain access to multiple Fortra-connected applications and services, eliminating the need for separate logins, and reducing friction.
• Registration with External Identity Providers: Users can use their existing Microsoft or Google accounts, simplifying the onboarding process and accelerating user adoption. By integrating seamlessly with external identity providers, we enable a secure and efficient exchange of authentication information while maintaining a consistent user experience.
• Multi-Factor Authentication (MFA): Fortra has implemented robust MFA capabilities to add an extra layer of security. Users using Username and Password will be required to provide secondary authentication with an authenticator app, ensuring accounts remain protected.
• Centralized Management: Fortra now has a centralized identity provider, setting us up to allow customers to efficiently manage user access control, permissions, and security policies across Fortra-connected applications and services over time. 
• Future CRM Integration: Users will be synced with Fortra’s Customer Relationship Manager (CRM) in the future, ensuring that users will be able to access their licensed Fortra products as expected.

Fortra Identity Provider is backed by Keycloak. FIDP performs an OAuth 2.0 authentication exchange with Keycloak to generate a JWT token, which is the same format as our existing identification token. The FIDP token is then included in calls to the Alert Logic Backend to authenticate requests. Periodically, our UI checks in with Keycloak to ensure that the authentication session is still valid.

For step-by-step instructions on FIDP credentials registration, refer to this document.

You can navigate to the Support Page in Alert Logic Console by expanding the main navigation menu and selecting Support. The Forta Identity Provider Status will display one of these values:

• Not eligible (user is not configured in FIDP)​
• Optional (user configured In FIDP with option to register credentials)​
• In Use (user has authenticated using FIDP credentials)​

Currently we do not require MFA to access the Alert Logic console. Will MFA be required? 

What mobile Authentication apps are supported? 

Can I manage MFA for other users?

No, users must manage their own MFA authenticator applications and configuration in the the Fortra Account Console.

Why should I use Microsoft or Google? 

Do I need to enable TLS on my e-mail server(s)?

Yes, TLS must be enabled on your e-mail server(s) to receive secure messages required to register your Fortra credentials.

For more information on TLS email encryption, refer to this document.

Do I need to allow third-party cookies for Fortra single login to work? 

It is strongly recommended, since third-party cookies are blocked by default in most browsers. Alert Logic applications require third-party cookie exceptions to be configured in the browser so we can seamlessly interact with these sites. Most issues can be avoided by enabling third-party cookies on all Alert Logic and Fortra sites.

For more information on allowing exceptions for third party cookies, refer to this article.

Does the Alert Logic Mobile App work with Fortra single login? 

Yes, the Alert Logic Mobile App is FIDP aware. 

What are the FIDP password requirements?

The password policy adheres to NIST guidelines and is PCI-compliant:

• Passwords must be 12 - 256 characters in length.
• Passwords must contain at least one uppercase, lowercase, digit and special character (!~@#$%^&*()-_=+<>?/\;:[]{},.)
• Passwords expire after 90 days (to be PCI-compliant).
• A new password must be different from the previous 5 passwords.

How do I change or reset the FIDP password?

You need to navigate to the User Management page in the Alert Logic console and click VIEW for the user in the list. The Reset Password section will provide a link to the Fortra Account Console. 

The Change Password button under the Basic Authentication section will allow you to update the password for your Fortra account.

How are Notification Only users handled?

These users will not be migrated. If the Notification Only user email address is associated with another user in the same account, we will add the other user to all alerts and remove the Notification Only user.  Also, we will prevent adding users with the same email address in the same account moving forward.