Email-based 2FA. Script to create local users.

[dbrito]

Hello guys I have the following scenario: I have to activate 2FA based on Email, for remote LDAP users (For SSL-VPN). The documentation that we have found is that users must be created locally (as found in the LDAP) to enable 2FA and add the email of the user where the tokens will be sent.

config user local edit "xxxx" set type ldap set two-factor email set email-to "xxxxx@fortinet.com" set username-case-sensitivity disable set ldap-server "xxxxxxx" next end

Please can you help me with a script, to automate the creation of these users locally to activate 2FA-Email. The users and email are in an excel.

Thank you.