Skip to main content
MohamedFawzi
Explorer
November 12, 2023
Question

Fortiauth token email

  • November 12, 2023
  • 3 replies
  • 2449 views

hi

can fortiauth send an activation token code via email via him self ? without an external email server

 

thanks

3 replies

AEK
SuperUser
SuperUser
November 12, 2023

Hello

FortiAuth or any other mail client must send e-mails through a mail server, or at least through a mail gateway that accepts this client.

AEK
Sheikh
Staff
Staff
November 13, 2023

Hello @MohamedFawzi 

 

In addition to what @AEK has mentioned that Fortiauthenticator is not pre-populated with Root CAs, so incase if you are sending emails to outside e.g. Microsoft Azure or Gmail, please see these articles below to add their certificates in Fortiauthenticator.

 

Configure Microsoft Office 365 SMTP as Mail server in FortiAuthenticator

 

https://community.fortinet.com/t5/FortiAuthenticator/Technical-Tip-Configure-Microsoft-Office-365-SMTP-as-Mail-server/ta-p/214959

 

Configure Gmail (STARTTLS) as mail server

 

https://community.fortinet.com/t5/FortiAuthenticator/Technical-Tip-Configure-Gmail-STARTTLS-as-mail-server/ta-p/195617

 

regards,

 

Sheikh

If you have found a solution, please like and mark it as solved to make it easily accessible for everyone.
pminarik
Staff
Staff
November 13, 2023

Yes, but...

 

There is a builtin SMTP server, and the default option "Local Mail Server" is capable of sending emails and will try to send an email if used (look up the MX record of the recipient, contact that server, attempt delivery), but in practice this is not very likely to work.

Modern servers are likely to reject you due to mismatched SPF records, and other security features. This may work when your target mailserver is internal, but for public internet, less likely.

 

I would not recommend using it, but if you insist: Before you try to use this, make sure to verify that delivery works. Run a test for every single recipient @domain.name that you will use, at the very least.

Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!