Skip to main content
SSIMON
SSIMON
New Member
January 12, 2023
Question

Email Two-Factor Authentication on FortiGate

  • January 12, 2023
  • 1 reply
  • 2092 views

Hello,

I am looking for a way to activate Email Two-Factor Authentication  by default on FortiGate

and I am looking for a way to massively activate Two-Factor Authentication  by default on FortiGate

I know how to activate for one user with cli but for 100 

 

Do you know method for that?

my user's are imported by ldap 

 

Thks a lot

1 reply

Markus_M
Staff & Editor
Markus_M
Staff & Editor
January 12, 2023

Hi Simon,

 

the easiest way to do this is a CLI export of the users and then forming the tokens to the users with the help of Excel and notepad++.

Get the format of a completed user to see how the others should look like.

Auto-assignment is a thing of the FortiAuthenticator.

 

Best regards,

 

Markus

SSIMON
SSIMONAuthor
New Member
January 12, 2023

Hello,

thank you for your feedback.
But it is not forti tokens that I put them, it is the sending of the code by mail or sms.
Unless I don't understand your answer correctly ;)

Markus_M
Staff & Editor
Markus_M
Staff & Editor
January 17, 2023

Hi Simon,

 

then it is easier. But not that email/SMS doesn't require activation (FortiToken is required to be activated, hence my assumption on your terminology).

Just add the number/email address and enable the TFA for that user.

Same scheme - create one user and then use it as template with above description.

 

Best regards,

 

Markus

 

Terms & ConditionsAccessibility statement