Source

Identity, access policy & device posture — found from sitemap — Defguard

Checked for Defguard on 5 Nov 2026

Page: https://docs.defguard.net/features/wireguard/multi-factor-authentication-mfa-2fa/external-sso-based-mfa
Checked: 5 Nov 2026, 14:23 UTC
How we may use it: Public page, crawling permitted

Technical details

type: page
http status: 200
content hash: sha256:be6eb39c67a9891bd9d719ecfd8457aa78df73f7f6a284166c2e4d27be7ccf0a
permission: robots_ok
screenshot: Screenshot on file (internal exhibit, not published)

Cited by

External MFA prerequisite Report an error

“Your instance must have external OIDC/SSO configured.”
External MFA location config Report an error

“Choose External MFA during location configuration or edit the desired location from Locations list.”
Client disconnect threshold Report an error

“When MFA is enabled on a location, Defguard periodically (currently every 1 minute) checks statistics if a client is connected and if the period of inactivity (defined in this option) is met, a client is disconnected.”
Gateway statistics recommendation Report an error

“Gateway to send statistics every 30sec”
Disconnect threshold recommendation Report an error

“Client disconnect threshold we recommend it to be min. 300 (5 min)”
External MFA client flow Report an error

“the user will be prompted to click on Authenticate with your configured OIDC (like Authenticate with Google) - which will open the browser and start the authentication session with your OIDC/SSO provider by the Defguard Enrollment service (which is the only public component).”
Biometry internal MFA Report an error

“Users can use biometry as an internal MFA method on their mobile devices.”
Biometry device indicator Report an error

“If a device has configured biometry as an MFA method, you will see fingerprint icon, next to the device name on devices list within user's profile.”