FortiAuthenticator Agent for Microsoft Windows - 2FA

[mchiara]

Hello, i am trying to configure 2FA for clients running Windows10, using "FortiAuthenticator Agent for Microsoft Windows". I would like my Fortiauthenticator to generate an OTP password at user log in time (the user insert domain "username" and "password" at windows log in screen and press enter), and to deliver the token code to the user via email (the user then insert the code in the OTP field). To try to achieve that, I configured remote Ldap auth server and imported few users. Imported users have "token-based authentication" enabled and "Deliver token code by" is set to "Email". The agent has been installed using a domain administrator account and has been configured with a "Fortiauthenticator" admin user (with Web Service Access enabled) + API key. But it does not work, the user does not get any code via mail (even enabling push notification). What am i doing wrong? Do i need to assign a fortitoken to the user inevitably? Thank you for your time.

Marco C.