email-based two-factor authentication

[unknown1020]

Friends, I have a question. I have a FortiGate 7.4.9. I need to enable two-factor authentication for a new SSL VPN user. This user is from Active Directory. However, when I go to the Authentication Type settings, the "email-based two-factor authentication" option isn't displayed. This is strange because I have several existing Active Directory users with this option enabled. I've searched online and it seems I can only enable it for local users, but I can't find a way to enable it for Active Directory users.

Could you please help me?

[AEK]

Try from CLI.

config user local
  edit user1
    set two-factor email 
    email-to user1@domain.com
  next
end

Hope it helps.

[AEK]

And once you enable it on CLI it will be visible on the GUI (for that user).