Technical Tip: Dual two-factor authentication for remote user sync rules

[ajoe]

Description

This article provides information on Dual (Email and SMS) as two factor for user authentication.

Scope

FortiAuthenticator v6.2.0 and above.

Solution

• The mentioned option enables a two-factor code to be sent via both Email and SMS.
• As of v6.2.0, this option is made available to sync using the Remote User Sync Rule.
• The option is available in the list of token-based authentication sync priorities when creating or editing a remote user sync rule.
  
  

Note:

When the Dual option is enabled, the information in the user attributes determines whether Email, SMS, or both are synced, and the 'Token-based authentication' type is set accordingly for the user.
Starting from v6.4.0, the functionality of this option has changed. When this option is enabled, users who have both Email and SMS attributes will be synced.