Fortiauth token email

[MohamedFawzi]

hi

can fortiauth send an activation token code via email via him self ? without an external email server

thanks

[AEK]

Hello

FortiAuth or any other mail client must send e-mails through a mail server, or at least through a mail gateway that accepts this client.

[Sheikh]

Hello @MohamedFawzi 

In addition to what @AEK has mentioned that Fortiauthenticator is not pre-populated with Root CAs, so incase if you are sending emails to outside e.g. Microsoft Azure or Gmail, please see these articles below to add their certificates in Fortiauthenticator.

Configure Microsoft Office 365 SMTP as Mail server in FortiAuthenticator

https://community.fortinet.com/t5/FortiAuthenticator/Technical-Tip-Configure-Microsoft-Office-365-SM...

Configure Gmail (STARTTLS) as mail server

https://community.fortinet.com/t5/FortiAuthenticator/Technical-Tip-Configure-Gmail-STARTTLS-as-mail-...

regards,

Sheikh

[pminarik]

Yes, but...

There is a builtin SMTP server, and the default option "Local Mail Server" is capable of sending emails and will try to send an email if used (look up the MX record of the recipient, contact that server, attempt delivery), but in practice this is not very likely to work.

Modern servers are likely to reject you due to mismatched SPF records, and other security features. This may work when your target mailserver is internal, but for public internet, less likely.

I would not recommend using it, but if you insist: Before you try to use this, make sure to verify that delivery works. Run a test for every single recipient @domain.name that you will use, at the very least.