| Description | This article describes how FortiGate L2TP does not support MFA or 2FA. |
| Scope | FortiGate v6.4 or above. |
| Solution |
The L2TP protocol standard officially only supports username & password authentication, so two-factor is not supported.
In FortiClient, there is an option to add the Token ID.
However, in the built-in Windows app, there is no such option to add the token/MFA info.
There is a workaround for this. If the token is appended to the end of the password, the FortiGate will recognize this as the token, and it will let the user through. This is confirmed as an official feature by the developers and should work. |
