Captive Portal with Email Collecction and OTP?

[WULABDoog]

Good day all.

I have been able to setup captive portal with email collection using FAP and FGT, but now, due to "security" stuff. I need to change the mode from email collection to something with OTP.

Does anyone knows a guide or where can I find information on how to setup the captive portal so the Fortigate sends OTP to the email using email collection?

Like, a client comes to the site, connects to the wifi, and from there I want the fgt to send an otp so the client can login.

or this kind of setup is too complicated and I should look towaards using authentication with otp only?

[ozkanaltas]

Hello @WULABDoog ,

Maybe this technical tip can solve your problem. 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-Captive-Portal-with-Guest-Users/...

If you say this tip does not work on your infra, you can use FortiAuthenticator for the guest portal.

https://docs.fortinet.com/document/fortiauthenticator/6.5.0/cookbook/959505/creating-a-guest-portal-...

[WULABDoog]

Thanks @ozkanaltas , the guest portal is what I have in mind, already tested in the lab and working.

But the opsec team wants the customer to "log in" for traceability, you know, know your customer stuff.

Has anyone had this problem with the opsec team? with the guest portal, plus device detection plus fortianalizer, I believe we don´t need anything else to trace if someone connected to the wifi and what webpages visited, right? heck, everything is logged anyways.

Does anyone have a real world example they could share?