FortiToken onboarding Email Notifications

[raymer-rd]

Hi,
first of all, thx a lot of making this Module, it has helped me automate different tasks of my day to day,
a bit of background:
normally went i create a user, and add a token on the fortigate it send an email, so i was kind of expecting that it would go like that after running:
Add-FGTUserLocal -name $user.NAME -status:$true -ldap_server $ldapsrv -two_factor 'fortitoken' -fortitoken $tokensDisponibles[$counter].serial_number -email_to $mail

but it was no the case, but i did notice, that there is a parameter call "[-two_factor_notification ] "

the question:
the questions is:
how to send email notification with token info after running either add or set-fgtuserlocal?
and if the parameter [-two_factor_notification ] is the one i should use, what exactly type of input is expecting, maybe "send", "enable"?

thanks for your help

[alagoutte]

Bonjour @raymer-rd,

I need to check but i think there is a call API on monitor for send mail

[alagoutte]

You can look on WebGui and F12 Web Develloper (on network), the API call ;-)

[raymer-rd]

for crying out loud, how it dint occur to me that was a thing, i been using developer tab to solve a lot of issue with fortigate blocking site, to check where they get redirected and stuff, but i dint even cross my mind i could look at it that way.

so far i manage the following but stuck atm, using the $body parameter.
working
Invoke-FGTRestMethod -method "post" -uri "api/v2/monitor/user/fortitoken/send-activation?vdom=root&token=&user_name=&method=email&vdom=root&email="

Not working:
Uri went i hit provision:
"https:///api/v2/monitor/user/fortitoken/send-activation?vdom=root"

payload:
{"token":"token_serial","user_name":"user","method":"email","vdom":"root","email":"mail"}
if i use this Uri+ payload on postman it send me the provision email.

but went i try this using
$body = '{"token":"token_serial","user_name":"user","method":"email","vdom":"root","email":"mail"}' Invoke-FGTRestMethod -method "post" -uri "api/v2/monitor/user/fortitoken/send-activation?vdom=root" -body $body

i get an error from the cmdlet:

note: i can definitely work with just passing the variables to the Uri itself, but ill like to send it as a variable (if posible) in the parameter for it "-body",

again, thanks for all your help in guiding me up to this point

[alagoutte]

Strange i check on the FNDN and there is a body payload...

You don't need to specify the vdom

what do you have when enable debug on cli ?

diagnose debug console timestamp enable
diagnose debug application httpsd -1
diagnose debug enable

[alagoutte]

i think the issue coming from your body, need to be an PS object $body = ConvertFrom-Json '{"token":"token_serial","user_name":"user","method":"email","vdom":"root","email":"mail"}'

[alagoutte]

after you can push a PR to add Send-FGTMonitoruserFortitokenActivation cmdlet

[raymer-rd]

thx a lot this work perfectly,

on the pull request, sadly i don't have the knowledge atm to do this, so if you want to added ill appreciated, other wise, after i get the "know how to" ill do.

now im gonna think about it if i make every part of the script a function, or leave as it is for the time being.
basically a script that connect to glpi sql get forms request for vpn, them validate, and proceed to create, enable, add token, group, etc, as needed, but mostly i just slap a bunch of code (like 300 lines), to be run by a schedule task multiples during the day.

Note: i can share it if anyone that work with GLPI and FortiGate, mostly as a template, as my coding skill are not great.