email-based two-factor authentication

Forum|Forum|7 months ago
January 12, 2026
2 replies
433 views

Friends, I have a question. I have a FortiGate 7.4.9. I need to enable two-factor authentication for a new SSL VPN user. This user is from Active Directory. However, when I go to the Authentication Type settings, the "email-based two-factor authentication" option isn't displayed. This is strange because I have several existing Active Directory users with this option enabled. I've searched online and it seems I can only enable it for local users, but I can't find a way to enable it for Active Directory users.

Could you please help me?

FortiGate

AEK

SuperUser

Try from CLI.

config user local
  edit user1
    set two-factor email 
    email-to user1@domain.com
  next
end

Hope it helps.

AEK

SuperUser

And once you enable it on CLI it will be visible on the GUI (for that user).

AEK

Sign up

Login with SSO

Login to the community

Login with SSO