Implementation Guide: Aruba Guest Wi-Fi + FortiAuthenticator SMS OTP

Hi,

this guide can help:

what about user group? guest user not in AD group

i can't create user ,

when user connect to guest portal on WLC it will redirect to Forti Authenticator they will enter mobile number we have SMS gateway

please not guest user they dont have username database , they will their mobile number only ?

Hello ​@MOGTABA-Diyar,

From the above I see that you would want use phone number for captive portal registration, via Radius authentication.

There are 2 ways on how you can move further with this. Note it depends on you to use only mobile number or the username and other information as well. Below suggests ways with phone number as requested.

Option 1: Social Users authentication with phone number (captive portal)

On the captive portal policy, under Authentication > Portals > Policies > Captive portals > Create New

• Authentication type → Password/OTP Authentication
• Enable Social users
• In Identity sources > Social Users, choose phone verification 

Option 2: Self-registration using mobile number as username

Go to Authentication > Self-service Portal > Self-registration and:

• Enable self-registration.
• Enable "Use mobile number as username" , the phone number becomes the username, and the password is sent via SMS.
• Set Password creation to Randomly generated (or user-defined).
• Set Send account information via SMS.
• Select your SMS gateway.
• Under Required Field Configuration, keep only Mobile number enabled (disable First name, Last name, Email, etc, your portal also will ideally have the same detial in this case.

Ref : 

https://docs.fortinet.com/document/fortiauthenticator/6.6.7/administration-guide/324587/self-registration

https://community.fortinet.com/fortigate-3/technical-tip-configuring-sms-two-factor-authentication-with-3rd-party-sms-provider-98169