WatchGuard Identity Security

One Identity Service for Sign-In, Apps, and Access

See the Demo Get Pricing
WatchGuard Identity Security screens on phone and desktop

Why WatchGuard Identity Security

fingerprint swirl

Verify every sign-in, from the computer to the cloud

person with a key next to them

Stop stolen passwords and phishing with MFA and passkeys

gear with 3 connected consoles coming off of the bottom

Manage identity for all your customers as one service

Verify Users, Connect Their Apps, and Control Access

Every sign-in is a potential entry point: computers, VPNs, remote desktop, Microsoft 365, and cloud apps. AuthPoint, WatchGuard’s cloud identity provider, covers all of them: it verifies who is signing in with MFA and passkeys, connects them to their apps with single sign-on, and applies your access policies. That is the first step of zero trust: know who is signing in before deciding what they can reach. For MSPs, it is one identity service to run across every customer.

AuthPoint

The identity provider: directory, sign-in with MFA and passkeys, single sign-on (SSO), and zero trust policies for computers, VPNs, Microsoft 365, and cloud apps.

Learn More

AuthPoint Total Identity Security

Everything in AuthPoint, plus Dark Web Credential Monitoring: it checks breach databases for your users’ credentials and alerts you when they appear.

Learn More
 

Choose Your Level of Identity Protection

AuthPoint comes in two plans. Both include identity management: directory, sign-in, single sign-on, and zero trust policies. Total Identity Security adds Dark Web Credential Monitoring. See what each includes.

WatchGuard Product AuthPoint AuthPoint
Total Identity Security
Identity Management
Active Directory and Entra ID Sync ✓ ✓
User Directory in WatchGuard Cloud ✓ ✓
Single Sign-On Portal (SSO) ✓ ✓
Zero Trust Policies ✓ ✓
External MFA for Microsoft Entra ID ✓ ✓
Sign-In Methods
Push / QR / OTP Authentication ✓ ✓
FIDO2 Passkeys (phishing-resistant) ✓ ✓
Hardware Token Support ✓ ✓
Device DNA ✓ ✓
Platform Management and Detection
Multi-Client Management in WatchGuard Cloud ✓ ✓
ThreatSync XDR Credential Access ✓ ✓
Dark Web Credential Monitoring
Credential Monitoring for Every User ✓
Breach Alerts in WatchGuard Cloud ✓
Affected Users and Breach Source ✓
 

Solution Brief

Modern Secure Access

See how AuthPoint and FireCloud give MSPs a practical path to Zero Trust, starting with secure access to private networks.

  • Verify identity before granting access
  • One app for Windows and macOS
  • Keep existing networks and tighten access over time
Read the Solution Brief

More Than MFA. From Identity to Secure Access.

Zero trust starts with identity, and access is the next step. The WatchGuard Access App brings AuthPoint and FireCloud, our cloud access service, into one app on Windows and macOS, so users sign in to their computer, open their apps, and reach private resources without a VPN client. Move to it at your own pace.

Yes. An identity provider connects to your directory, verifies users at sign-in, gives them single sign-on, and applies access policies. AuthPoint does all four from WatchGuard Cloud, and MFA is just the sign-in part. If you use AuthPoint only for MFA today, the rest is already in your license.

Because AuthPoint gives you one MFA for Microsoft 365, VPNs, remote desktop, and computers. Add it to Entra ID as External MFA (Entra ID P1 or higher): Entra ID handles the sign-in and AuthPoint provides the second factor. Or federate Microsoft 365 with AuthPoint (no P1 needed), and AuthPoint becomes the identity provider. For MSPs, it is one service to operate and bill for.

Push notifications and one-time codes can be intercepted by real-time phishing, or approved by mistake when attackers flood users with requests. AuthPoint counters both: FIDO2 passkeys are tied to the real site’s domain, so fake login pages cannot capture them, and ThreatSync, our XDR, detects push abuse and can block the user automatically.

WatchGuard Identity Security is part of the WatchGuard Unified Security Platform alongside Network Security, Endpoint Security, FireCloud, and ThreatSync XDR. All products share the same WatchGuard Cloud console, so ThreatSync can respond to an identity incident by blocking the user, blocking the IP on the Firebox, and isolating the computer, with no separate vendors to manage.

Yes. Cyber insurance carriers ask for MFA, and some now expect phishing-resistant methods; the same goes for compliance frameworks that mandate MFA. AuthPoint covers computer sign-in, VPNs, Microsoft 365, and cloud apps from one console, and FIDO2 passkeys for web applications are included in every AuthPoint license.

This form requires the Marketo script to function properly.

One Console. All Your Users. Up and Running the Same Day.

Let us show you how AuthPoint protects sign-in to computers, VPNs, Microsoft 365, and cloud apps.

More Resources