FortiToken Mobile vs Salesforce Authenticator

FortiToken Mobile is an OATH compliant, event-based and time-based One Time Password (OTP) generator application for the mobile device. It is the client component of Fortinet’s highly secure, simple to use and administer, and extremely cost effective solution for meeting your strong authentication needs. You will need to use FortiOS or FortiAuthenticator as the back-end validation server. Requires iOS 12 or later. Compatible with iPhone, iPad, and iPod touch. Privacy and Control: FortiToken Mobile cannot change settings on your phone, take pictures or video, record or transmit audio, nor can it read or send emails. Further, it cannot see your browser history, and it requires your permission to send you notifications or to change any settings. And, FortiToken Mobile cannot remotely wipe your phone. Any visibility FortiToken Mobile requires is to verify your OS version to determine app version compatibility. Sensitive information, such as Email Address or Token seeds may be entered during manual installation of FortiToken tokens, 3rd Party tokens, and Token Transfer. While FortiToken Mobile cannot change any settings without your permission, the following permissions are relevant to FortiToken Mobile operations: • Access to camera for scanning QR codes for easy token activation • TouchID/FaceID: used for app security, respectively. • Access to the Internet for communication to activate tokens and receive push notifications • "Send Feedback by Email", to automatically populate the "Sender" field • Internally share files between applications to prepare an attachment to be sent by email for "Send Feedback by Email" • FortiToken must keep the phone awake while it is upgrading the internal database to avoid data corruption. By downloading and Installing FortiToken Mobile, I agree with all terms stated above.

Salesforce Authenticator adds an extra layer of security for your online accounts with multi-factor authentication (also known as two-factor authentication). With Salesforce Authenticator, you use your mobile device to verify your identity when logging in to your account or performing critical actions. The app sends you a push notification, and you approve or deny the activity with just a tap. For even more convenience, Salesforce Authenticator can use your mobile device’s location services to automatically approve account activity that you trust. The app also provides one-time verification codes for use while you’re offline or have low connectivity. Use Salesforce Authenticator to secure all your online accounts that support time-based one-time passwords (TOTP). Any service that allows multi-factor authentication using an “Authenticator app” is compatible with Salesforce Authenticator. Location Data & Privacy If you enable location-based automation in Salesforce Authenticator, rest assured that Salesforce never tracks your location or shares it with anyone. Location data is stored securely on your mobile device, never in the cloud. You can delete all location data from your device or turn off location services at any time. Learn more about how the app uses location data in Salesforce Help. Battery Usage Rather than getting precise location updates, Salesforce Authenticator only receives updates when you enter or leave the approximate area, or “geofence,” of a location that you trust. By minimizing the frequency of location updates, Salesforce Authenticator conserves your mobile device’s battery life. To reduce battery usage even more, you can turn off location services and stop automating your activity.