freeradius package + ad + mfa

[pfsenseuser2020]

is it possible to use the freeradius package to do otp for active directory users? i know it can be done for internal pfsense users, but is it possible for ad users as well?

[stephenw10]

You mean AD authenticating against Freeradius? Then yes, probably, assuming it can do that.

Or do you mean something more like using Freeradius to add MFA to AD auth?

Steve

[pfsenseuser2020]

@stephenw10 yeah. let's say i have an openvpn user that comes from ad. can i utilize the freeradius to add mfa to it?