Freedom251 › Multi-Factor Authentication Software
WatchGuard AuthPoint
What WatchGuard AuthPoint is
WatchGuard AuthPoint is a cloud-based multifactor authentication service that verifies users before they access computers, VPNs, cloud services, and applications. It supports push notifications, one-time passcodes, QR codes, hardware tokens, and phishing-resistant FIDO2 passkeys. WatchGuard says passkeys are cryptographically bound to the legitimate domain to help prevent fake login pages from capturing credentials. Zero trust policies can evaluate factors such as device, location, time, and behavior when deciding whether to allow access.
AuthPoint includes an application portal for SAML and OIDC applications and supports over 130 third-party integrations, including VPN, Microsoft Entra ID, and cloud applications. It is managed through WatchGuard Cloud, which supports multi-tenant administration for service providers. An optional Gateway connects the service to RADIUS clients, Active Directory or LDAP, and the ADFS agent; it cannot be installed on Windows servers with FIPS mode enabled. AuthPoint is licensed per user, with pricing available from a WatchGuard reseller and no free plan. A 30-day trial can enroll up to 250 users. The mobile app supports Android 7.0 and higher and iOS 14.0 and higher. AuthPoint also offers passwordless authentication and adaptive access policies, while ThreatSync detects push abuse and blocks tokens automatically.
Who it suits
AuthPoint suits organizations that need multifactor authentication across computers, VPNs, cloud services, and applications. Its multi-tenant WatchGuard Cloud management also suits MSPs managing multiple customer accounts, while the Gateway is relevant for environments using RADIUS, Active Directory or LDAP, or ADFS.
What it does well
- Supports push, OTP, QR codes, hardware tokens, and passkeys.
- Zero trust policies can consider device, location, time, and behavior.
- SSO portal supports SAML and OIDC applications.
- WatchGuard lists over 130 third-party integrations.
- 30-day trial supports up to 250 users.
What to know first
- No free plan; pricing requires a WatchGuard reseller quote.
- Gateway cannot run on Windows servers with FIPS mode enabled.
- Mobile app requires Android 7.0+ or iOS 14.0+.
Limits
The free trial lasts 30 days and can enroll up to 250 users. The optional Gateway cannot be installed on Windows servers with FIPS mode enabled; External MFA for Microsoft Entra ID requires Entra ID P1 or higher.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| AuthPoint Total Identity Security | Contact a WatchGuard reseller for a quote. · Includes MFA and Dark Web Monitoring | On request |
| AuthPoint MFA | Per user for a one- or three-year period; quote from a WatchGuard reseller. · Per-user licensing · volume discounts as user base grows | On request |
As watchguard.com lists them, read 12 Oct 2026. The maker's own page has the final word.
Getting started
- Visit https://www.watchguard.com/wgrd-products/authpoint.
- Request per-user pricing from a WatchGuard reseller, or start the 30-day trial for up to 250 users.
- Manage AuthPoint through WatchGuard Cloud.
- Install the optional AuthPoint Gateway on a supported Windows Server if connecting RADIUS clients, Active Directory or LDAP, or the ADFS agent.
- Install the AuthPoint mobile app on Android 7.0 or higher or iOS 14.0 or higher if using mobile authentication.
Verdict
Choose AuthPoint if you need several authentication methods, adaptive access controls, and centralized or multi-tenant management. Look elsewhere if you require a free plan or need to install its Gateway on a Windows server with FIPS mode enabled.
Questions
How is AuthPoint priced?
AuthPoint is licensed per user. A one- or three-year period is available for AuthPoint MFA, with a quote from a WatchGuard reseller; subscription licenses are invoiced monthly based on user allocation.
Does AuthPoint have a free plan or trial?
There is no free plan. A 30-day trial is available for up to 250 users.
Which platforms does AuthPoint support?
Its listed platforms are Android, iOS, macOS, web, Windows, and API. The mobile app supports Android 7.0 and higher and iOS 14.0 and higher.
What authentication methods does AuthPoint offer?
It supports push notifications, one-time passcodes, QR codes, hardware tokens, and passkeys, including phishing-resistant FIDO2 passkeys.
What integrations does AuthPoint support?
WatchGuard lists over 130 third-party integrations, including VPN, Microsoft Entra ID, and cloud applications. Integration methods include SAML, OIDC, RADIUS, RESTful API client, ADFS, RD Web, and Firebox.
Does External MFA for Microsoft Entra ID require a separate license?
External MFA for Entra ID is included in AuthPoint MFA and Total Identity Security. It requires Entra ID P1 or higher.
Facts from WatchGuard AuthPoint's own pages
- Access controls
- Zero trust risk policies can use factors including location, time, and device DNA. · watchguard.com, 12 Oct 2026
- Administration
- AuthPoint is managed through WatchGuard Cloud, which supports multi-tenant management for service providers. · watchguard.com, 12 Oct 2026
- Authentication methods
- AuthPoint supports push, QR code, one-time passcodes, FIDO2 passkeys, and hardware tokens. · watchguard.com, 12 Oct 2026
- Compliance
- WatchGuard says Identity Security aligns with NIST SP 800-63-4 authenticator assurance levels, with FIDO2 passkeys delivering AAL2 and hardware bound passkeys via YubiKey meeting AAL3. · watchguard.com, 11 Oct 2026
- Free plan
- No · watchguard.com, 23 Sept 2026
- Gateway limitation
- The Gateway cannot be installed on Windows servers with FIPS mode enabled. · watchguard.com, 11 Oct 2026
- Gateway requirement
- The AuthPoint Gateway is installed on a network to connect AuthPoint with RADIUS clients, Active Directory or LDAP, and the ADFS agent. · watchguard.com, 11 Oct 2026
- Integrations
- AuthPoint supports Firebox, RADIUS, OIDC, and SAML resources, with integration guides for third-party applications and services. · watchguard.com, 12 Oct 2026
- Intended users
- WatchGuard describes AuthPoint as serving organizations and MSPs, with multi tenant management for MSPs managing multiple customer accounts. · watchguard.com, 11 Oct 2026
- License model
- AuthPoint is licensed per user and offers term, subscription, trial, and service-provider NFR license types. · watchguard.com, 12 Oct 2026
- Microsoft Entra ID
- External MFA for Microsoft Entra ID is included in both AuthPoint MFA and Total Identity Security, and requires Entra ID P1 or higher. · watchguard.com, 12 Oct 2026
- Microsoft licensing
- AuthPoint runs on WatchGuard Cloud independently of Microsoft Entra ID licensing, while External MFA for Entra ID requires Entra ID P1 or higher. · watchguard.com, 11 Oct 2026
- Mobile app compatibility
- The AuthPoint mobile app supports Android 7.0 and higher and iOS 14.0 and higher. · watchguard.com, 12 Oct 2026
- On-premises component
- The optional AuthPoint Gateway runs on supported Windows Server versions and connects AuthPoint to RADIUS clients and LDAP or Active Directory. · watchguard.com, 12 Oct 2026
- Passkeys
- WatchGuard says FIDO2 passkeys are cryptographically bound to the legitimate domain to prevent fake login pages from capturing credentials. · watchguard.com, 11 Oct 2026
- Platforms
- AuthPoint components include Windows and macOS login apps, and its mobile app supports Android 7.0 and higher and iOS 14.0 and higher. · watchguard.com, 11 Oct 2026
- Purpose
- AuthPoint is a cloud-based identity security and multi-factor authentication service that protects logins to endpoints, VPNs, Microsoft environments, and cloud applications. · watchguard.com, 12 Oct 2026
- Security certification
- WatchGuard Cloud's information security management system is certified to ISO/IEC 27001:2022, within the scope described on WatchGuard's certification page. · watchguard.com, 12 Oct 2026
- SSO
- The SSO application portal provides access to SAML and OIDC applications. · watchguard.com, 12 Oct 2026
- SSO and protocols
- AuthPoint provides an MFA protected application portal and supports cloud application access via SAML and OIDC. · watchguard.com, 11 Oct 2026
- Subscription billing
- Subscription licenses are invoiced monthly based on user allocation, with volume discounts applied. · watchguard.com, 12 Oct 2026
- Support
- The AuthPoint MFA subscription includes technical support and feature updates. · watchguard.com, 12 Oct 2026
- Threat response
- WatchGuard says ThreatSync detects push abuse and blocks tokens automatically to address MFA fatigue attacks. · watchguard.com, 11 Oct 2026
- Trial
- The free trial lasts 30 days and can enroll up to 250 users. · watchguard.com, 12 Oct 2026
Where WatchGuard AuthPoint stands on Freedom251
- Multi-Factor Authentication Software#33 of 52
- Firewall Management Software#19 of 29
- Firewall Software#60 of 81
- Authenticator apps#84 of 111