Skip to main content
unknown1020
Explorer III
January 12, 2026
Question

email-based two-factor authentication

Friends, I have a question. I have a FortiGate 7.4.9. I need to enable two-factor authentication for a new SSL VPN user. This user is from Active Directory. However, when I go to the Authentication Type settings, the "email-based two-factor authentication" option isn't displayed. This is strange because I have several existing Active Directory users with this option enabled. I've searched online and it seems I can only enable it for local users, but I can't find a way to enable it for Active Directory users.

 

Screenshot_1.jpgCould you please help me?

 

2 replies

AEK
SuperUser
SuperUser
January 12, 2026

Try from CLI.

config user local
edit user1
set two-factor email
email-to user1@domain.com
next
end

Hope it helps.

AEK
AEK
SuperUser
SuperUser
January 12, 2026

And once you enable it on CLI it will be visible on the GUI (for that user).

AEK
Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT