Skip to main content
ajoe
Staff
Staff
January 2, 2021

Technical Tip: How to enable Email password recovery with Remote User Sync Rule

  • January 2, 2021
  • 0 replies
  • 1330 views

Description


This article describes how to enable email password recovery for remote users  from remote LDAP user sync rules.

Scope


FortiAuthenticator v6.2.1.

Solution

 

  • In earlier versions it is necessary to manually enable Email password recovery for each user.
  • Starting from 6.2.1 version it is possible to enable Email password recovery from LDAP sync rule itself when-in this setting make sure that the option is enabled for both existing and new remote users.

To enable the option:
Go to Authentication -> User Management -> Remote User Sync Rule, edit Remote LDAP User Synchronization Rule and enable Email password recovery.

email pass recovery.png

 

When the option is enabled in the sync rule, FortiAuthenticator will:

  • Enable the email password recovery setting for new remote LDAP users if they also have a valid email address.
  • Enable the email password recovery setting for existing remote LDAP users if they also have a valid email address.

When the option is disabled in the sync rule, FortiAuthenticator will behave the same as in previous releases:

  • Disable the email password recovery setting for new remote LDAP users.
  •  Leave the current email password recovery setting unchanged for existing remote LDAP users.