MFA with TOTP without FortiToken?

[miciti]

Hi everyone,

I am searching for a way to use MFA with TOTP without paying for FortiToken. 

Our internal users get authenticated via SAML and MFA from Microsoft Cloud. 

But we do have some external accounts which can't be linked to SAML but need VPN. 

Is there any other way to set up MFA with a TOTP App without using FortiToken?

[funkylicious · Accepted solution]

hi,

you can try keycloak which leverages SAML 

[miciti]

@funkylicious 

I will look into keycloak. Thank you very much!

[jotecan]

You can 2FA with email or with RADIUS server:

With email:

config user local
   edit "user"
       set type password
       set two-factor email
       set email-to "user@domain.com"
   next
end

With RADIUS: We are OpenText clients with NOWS subscription (older Novell). This bundle includes NetIQ Advanced Authentication that lets several source directory and serves RADIUS with MFA (TOTP, SMS, email, etc)