DynamicID email OTP enforce

[usukhbayar_g]

Here is what i'm trying to do.

I have configured DynamicID as second authentication factor. And it works fine. Now how to enforce it to the RA VPN users without removing username/password authentication from Properties->VPN clients->Authentication. I know removing it will leave username/pasword + OTP authentication alone and users have recreate site to use RA VPN. But I still need username/password authentication for some emergency.

Or is there any suggestion in case of emergency, admins could authenticate without OTP? Any ideas can be helpful.

1. Enforce OTP for users
2. Leave username/password authentication

[PhoneBoy]

Unfortunately, there isn't a way to have different authentication factor requirements for different type of users.