Technical Note: Two-factor authentication. Mail server must be defined before user accounts (5.0.8 or later)

[rishii]

Description

Starting in FortiOS 5.0.8, selecting email for two-factor authentication is no longer available if a mail server has not yet been defined.

#config user local
(local) #edit guest
(guest) # set two-factor
disable       disable
fortitoken    FortiToken
sms           SMS authentication code.

It should be noted that earlier patches of FortiOS 5.0 did not have this restriction.

Solution

First configure An email server must first be configured.  Then it is possible to select "email" as an option when configuring two-factor authentication.

For example:

config system email-server
set reply-to "test@testmail.com"
set server "10.10.10.10"
end

#config user local
(local) #edit guest
(guest) # set two-factor
disable       disable
fortitoken    FortiToken
email         Email authentication code.
sms           SMS authentication code.