DynamicID email OTP enforce

usukhbayar_g — Fri, 22 Aug 2025 03:39:01 GMT

Here is what i'm trying to do.

I have configured DynamicID as second authentication factor. And it works fine. Now how to enforce it to the RA VPN users without removing username/password authentication from Properties->VPN clients->Authentication. I know removing it will leave username/pasword + OTP authentication alone and users have recreate site to use RA VPN. But I still need username/password authentication for some emergency.

Or is there any suggestion in case of emergency, admins could authenticate without OTP? Any ideas can be helpful.

Enforce OTP for users
Leave username/password authentication

Re: DynamicID email OTP enforce

PhoneBoy — Fri, 22 Aug 2025 22:07:03 GMT

Unfortunately, there isn't a way to have different authentication factor requirements for different type of users.

topic DynamicID email OTP enforce in SASE and Remote Access

DynamicID email OTP enforce

Re: DynamicID email OTP enforce