Skip to main content
Florian12
Florian12
New Member
August 23, 2023
Solved

FortiClient 2FA via E-Mail for LDAP Users

  • August 23, 2023
  • 2 replies
  • 1443 views

Hi, got the following situation:

 

Our FortiGate is connected to our AD. The users have corresponding groups on the AD and can sign in to the corresponding FortiClient connections. The users are NOT defined on the FortiGate, not as local and not as LDAP.

 

Now we would like to make them use 2FA in the FortiClient via e-mail, so without using FortiTokens, FortiAuthenticator or similar. 

 

Is there any way to do this without having to create users on the FortiGate?

We are talking of at least 300 users, I'd say. Possibly even more.

 

Thanks for the help in advance!

Best answer by rbraha

Hi @Florian12 

Unfortunately this cant be possible the user database need to be present on FGT otherwise FGT cannot validate if the user has second factor authentication like FortiToken or email .

2 replies

rbraha
Staff
rbrahaAnswer
Staff
August 23, 2023

Hi @Florian12 

Unfortunately this cant be possible the user database need to be present on FGT otherwise FGT cannot validate if the user has second factor authentication like FortiToken or email .

Florian12
Florian12Author
New Member
August 24, 2023

Hi @rbraha

Thanks for the quick response and the answer, that'll help a lot!

Have a nice day! :)

Terms & ConditionsAccessibility statement