Overview

Torii integrates with Fortinet FortiManager and syncs:

• FortiManager does not expose an administrator status or last login, so every synced administrator is shown as active.
• You can constantly stay updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table.

Requirements

Accounts & Permissions

• A self-hosted FortiManager, version 7.2.2 or later. FortiManager Cloud is not supported.
• FortiManager must be reachable from the internet and use a valid TLS certificate.
• A FortiManager administrator who can create REST API administrators.
• The API administrator's profile must be able to read System Settings > Administrators. To use Torii actions, it must also be able to write to it.
• The API administrator's trusted hosts must include Torii's IP addresses.

Required keys

To connect this integration, we require the following:

• FortiManager URL - for example https://fortimanager.example.com (no trailing slash).
• API Key - generated for a REST API administrator.

How to Generate the Required Values

Step 1: Create a REST API administrator

1. In FortiManager, go to System Settings > Administrators and click Create New > REST API Admin.
2. Enter a name (for example, torii_api) and select an admin profile that can read System Settings > Administrators (write access if you want to use Torii actions).
3. Set the JSON API access to Read, or Read-Write if you want to use Torii actions.
4. Add Torii's IP addresses as trusted hosts.
5. Save the administrator and copy the API key.

Alternative: use the command line

config system admin user
  edit torii_api
    set user_type api
    set profileid <profile>
    set rpc-permit read
    set trusthost1 <Torii IP> <mask>
  next
end
execute api-user generate-key torii_api

Use set rpc-permit read-write if you want to use Torii actions. For more details, see the FortiManager JSON API guide and this Fortinet community article.

How to Connect the Integration

1. Go to the Integrations page in Torii.
2. Search for Fortinet and click Connect.
3. Enter your FortiManager URL and API Key.
4. Click Connect.

Actions

• Create Fortinet user - creates a FortiManager administrator with a name, password, admin profile, email, and optional first and last name. The new administrator is required to change the password at first login.
• Update Fortinet user - changes an administrator's admin profile.
• Delete Fortinet user - permanently removes an administrator from FortiManager.

Actions are in beta. They require the API administrator to have JSON API read-write access and an admin profile with write access to System Settings > Administrators.

For any further questions, please contact Torii Support.