2fa support with AD

Omniasrl

Goodmornig,

it's possible to configure 2fa with Active directory authentication?

Thanks

Zyxel_Tina

Hi @Omniasrl,

The 2FA authentication support for external AD/LDAP by Email will be available in the upcoming uOS firmware version 1.38, scheduled for release in April 2026.

Please refer to the official release notes for more details once the firmware is available. Thank you!

Zyxel_Tina

Hi @Omniasrl,

To implement 2FA/MFA for external users, please use SMS or Email-based MFA. This method is supported for AD/LDAP users. For configuration details, please refer to p.584 in our handbook.

Also, please ensure that the mobile number and/or Email address is filled in your AD server so that the SMS/Email authentication codes can be delivered properly.

Omniasrl

We are operating on a Usg flex 500H in HA. Does the same guide apply?
Our tests show that it does not work.

Zyxel_Tina

Hi @Omniasrl,

I apologize for the confusion. Currently, USG FLEX H series devices (uOS) only support 2FA (Google Authenticator) for local users and do not support 2FA for AD/external users.

Omniasrl

is there an ETA?

Zyxel_Tina

Hi @Omniasrl,

The 2FA authentication support for external AD/LDAP by Email will be available in the upcoming uOS firmware version 1.38, scheduled for release in April 2026.

Please refer to the official release notes for more details once the firmware is available. Thank you!