2FA: Enabling OTP only if configured

[Axok]

Edit: I found another solution but I am still interested in the solution of this problem.

Hello to all,

Currently, I have successfully set up LDAP authentication with automatic user creation. But now I want to take the next step by enabling OTP. I managed to activate it in case the LDAP user already has the configured OTP.

The problem I am facing is the following: When I create a new user on my LDAP server, he can't connect to OPNsense because he is missing the OTP. So the automatic user creation does not work.

How to only enable OTP for users that have previously configured OTP?

OPNsense 22.1.8_1-amd64
FreeBSD 13.0-STABLE
OpenSSL 1.1.1o 3 May 2022