Hot!How I can add MFA for non-corporate vpn users using Azure

Author
Daryaya
New Member
  • Total Posts : 3
  • Scores: 0
  • Reward points: 0
  • Joined: 2020/09/01 08:14:56
  • Status: offline
2020/09/02 02:56:28 (permalink)
0

How I can add MFA for non-corporate vpn users using Azure

Hi,
 
Currently we use AD configured as ldap server to authenticate our 3rd party vpn users who need to get to our network. for internal users, we configure Azure as radius server that can also offer MFA. I was wondering is there a way to use MFA for external users too as they don't have o365 account?
#1

1 Reply Related Threads

    xsilver
    Expert Member
    • Total Posts : 539
    • Scores: 135
    • Reward points: 0
    • Joined: 2015/02/02 03:22:58
    • Location: EMEA
    • Status: offline
    Re: How I can add MFA for non-corporate vpn users using Azure 2020/09/10 03:36:40 (permalink)
    0
    Hi Daryaya,
     
    on FortiGate, if you configure not just LDAP server to the group, but set local users, remote type ('set type ldap' for e.g.), pointing to LDAP, and equip those on-FGT locally defined users with FortiToken. Then when they log in and pass user/password verification they should be prompted for the token. Keep in mind that AD is case insensitive, so older you could circumnavigate 2FA on old FortiOS by changing username used to not match exact case-sensitive setting on FortiGate, but newer FortiGates do have that handled with " set username-case-sensitivity disable" ;-)

    on FortiAuthenticator, you can sync users from that LDAP and let sync rules to assign tokens to those users completely automatically.
     

    Kind Regards,
    Tomas
    #2
    Jump to:
    © 2020 APG vNext Commercial Version 5.5