AuthPoint External MFA for Entra ID Is Generally Available + New Mobile App
External MFA for Microsoft Entra ID
AuthPoint now works as an External MFA provider for Microsoft Entra ID. This is the GA release of the integration we opened for beta in April 2025 and previewed in our March announcement.
Partners and customers using Entra ID as their identity provider can configure AuthPoint to handle MFA for Microsoft 365 sign-ins, Azure services, and any application protected by Entra ID Conditional Access. No on-premises Active Directory required. No SAML federation. No LDAP.
If your organization currently runs both Microsoft Authenticator and AuthPoint, users can now consolidate into a single app. Anyone already using AuthPoint for VPN, Windows login, or macOS can use the same app for Microsoft 365 sign-ins.
What's supported
AuthPoint, as an External MFA provider, supports push notifications, time-based one-time passcodes (TOTP), QR code verification, hardware token OTP, and FIDO2 passkeys. Push, TOTP, QR code, and hardware tokens work across all resources AuthPoint protects. Passkeys are available for OIDC-based resources, including External MFA, FireCloud, and OIDC applications.
Requirements
A Microsoft Entra ID P1 license or higher (this is a Microsoft requirement for External MFA), an active WatchGuard AuthPoint subscription, and access to the Microsoft Entra ID Admin Center to configure external authentication methods. Customers and partners maintain their own Entra ID tenant and subscription.
New AuthPoint Mobile App
Today also marks the GA of the redesigned AuthPoint mobile app, completing a full UX refresh across all three platforms. The Windows agent was updated in July 2025. The macOS agent followed shortly after. The mobile app is the final piece.
What's new in the app:
Redesigned interface across all screens. Dark mode. Simplified token activation for new users. Unified list for WatchGuard and third-party tokens. Improved search and navigation.
The mobile app continues to support all existing authentication methods: push notifications, TOTP, QR code, and passkeys. No changes to how authentication works. The update is focused on usability, visual consistency across platforms, and reducing friction during setup and daily use.
Licensing
Both updates are included in existing AuthPoint MFA and AuthPoint Total Identity Security licenses at no additional cost.
Getting started
Refer to the AuthPoint release notes and the AuthPoint Help Center for configuration steps and deployment guides.
For External MFA setup, see Microsoft 365 Integration with AuthPoint for Entra Users, and for the mobile app update, see About the AuthPoint Mobile App.
For questions, contact your WatchGuard Account Manager or use standard support channels.
Learn More
- Microsoft 365 Integration with AuthPoint for Entra Users
- AuthPoint: External MFA for Microsoft Entra ID
- AuthPoint EAM Beta Announcement (April 2025)
- Entra ID Directory Synchronization for WatchGuard Cloud (October 2025)
- FAQ: AuthPoint and Microsoft Entra ID.
From Microsoft: