Description
This article describes how to create a user with SMS-based two-factor authentication on FortiGate.
Note that the option is not available in GUI by default and the setting is required to configure from CLI as follows.
Scope
FortiGate.
Solution
- The option is not available in GUI by default.
- Configure a user with a two-factor option from CLI.
config user local
edit test
set two-factor sms
set sms-server <fortiguard | custom>
set sms-phone <phone number of user>
end
end
Note:
Make sure to configure the sms-server and sms-phone options, otherwise, it will not let save the config and the 'SMS based two-factor authentication' option will not show in GUI. For the sms-server, it is possible to use FortiGuard, or define a custom SMS server under these settings:
config system sms-server
edit <provider> (provider name or any name)
set mail-server <server_name> (provider domain)
end
- The option becomes available in GUI after the CLI setting is configured.
