WatchGuard AuthPoint
WatchGuard AuthPoint is a cloud-based multi-factor authentication service that verifies users before they access computers, VPNs, cloud services, and applica…
What WatchGuard AuthPoint is
WatchGuard AuthPoint is a cloud-based multi-factor authentication service that verifies users before they access computers, VPNs, cloud services, and applications. It supports push notifications, one-time passcodes, QR codes, hardware tokens, and phishing-resistant passkeys. Access policies can consider device, location, and behavior, while its application portal and SAML and OIDC support provide access to cloud apps. WatchGuard lists over 130 third-party integrations, including VPN, Microsoft Entra ID, and cloud applications. The service is managed through WatchGuard Cloud, including multi-tenant administration for service providers. An optional Gateway connects AuthPoint with RADIUS clients, Active Directory or LDAP, and the ADFS agent; it cannot be installed on Windows servers with FIPS mode enabled. AuthPoint is licensed per user, with pricing available by request and no free plan. Its 30-day trial can enroll up to 250 users. The mobile app supports Android 7.0 and higher and iOS 14.0 and higher.
Good
- Supports passkeys, hardware tokens, and other factors
- Policies can assess device, location, and behavior
- Over 130 third-party integrations listed
- 30-day trial for up to 250 users
Watch out
- No free plan
- Pricing is available by request
- Gateway cannot run on Windows servers with FIPS mode enabled
Who it suits
AuthPoint is aimed at organizations and managed service providers that need multi-factor authentication across connected services. Its multi-tenant management may suit providers administering multiple customer accounts.
Verdict
AuthPoint brings multiple authentication methods, access policies, and application integrations into a managed service. Organizations should account for per-user licensing and the Gateway's Windows FIPS limitation where that component is needed.
Plans and prices
From WatchGuard AuthPoint's own pricing page, checked 12 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| AuthPoint MFA | Priced on request | Per-user licensing · volume discounts as user base grows · Per user for a one- or three-year period; quote from a WatchGuard reseller. |
| AuthPoint Total Identity Security | Priced on request | Includes MFA and Dark Web Monitoring · Contact a WatchGuard reseller for a quote. |
The facts
Each one read from WatchGuard AuthPoint's own pages, with the date it was checked.
What it does
- Access controls
- Zero trust risk policies can use factors including location, time, and device DNA.checked 12 Oct 2026
- Administration
- AuthPoint is managed through WatchGuard Cloud, which supports multi-tenant management for service providers.checked 12 Oct 2026
- Authentication methods
- AuthPoint supports push, QR code, one-time passcodes, FIDO2 passkeys, and hardware tokens.checked 12 Oct 2026
- Compliance
- WatchGuard says Identity Security aligns with NIST SP 800-63-4 authenticator assurance levels, with FIDO2 passkeys delivering AAL2 and hardware bound passkeys via YubiKey meeting AAL3.checked 11 Oct 2026
- Gateway limitation
- The Gateway cannot be installed on Windows servers with FIPS mode enabled.checked 11 Oct 2026
- Gateway requirement
- The AuthPoint Gateway is installed on a network to connect AuthPoint with RADIUS clients, Active Directory or LDAP, and the ADFS agent.checked 11 Oct 2026
- Integrations
- AuthPoint supports Firebox, RADIUS, OIDC, and SAML resources, with integration guides for third-party applications and services.checked 12 Oct 2026
- Intended users
- WatchGuard describes AuthPoint as serving organizations and MSPs, with multi tenant management for MSPs managing multiple customer accounts.checked 11 Oct 2026
- License model
- AuthPoint is licensed per user and offers term, subscription, trial, and service-provider NFR license types.checked 12 Oct 2026
- Microsoft Entra ID
- External MFA for Microsoft Entra ID is included in both AuthPoint MFA and Total Identity Security, and requires Entra ID P1 or higher.checked 12 Oct 2026
- Microsoft licensing
- AuthPoint runs on WatchGuard Cloud independently of Microsoft Entra ID licensing, while External MFA for Entra ID requires Entra ID P1 or higher.checked 11 Oct 2026
- On-premises component
- The optional AuthPoint Gateway runs on supported Windows Server versions and connects AuthPoint to RADIUS clients and LDAP or Active Directory.checked 12 Oct 2026
- Passkeys
- WatchGuard says FIDO2 passkeys are cryptographically bound to the legitimate domain to prevent fake login pages from capturing credentials.checked 11 Oct 2026
- Purpose
- AuthPoint is a cloud-based identity security and multi-factor authentication service that protects logins to endpoints, VPNs, Microsoft environments, and cloud applications.checked 12 Oct 2026
- Security certification
- WatchGuard Cloud's information security management system is certified to ISO/IEC 27001:2022, within the scope described on WatchGuard's certification page.checked 12 Oct 2026
- SSO
- The SSO application portal provides access to SAML and OIDC applications.checked 12 Oct 2026
- SSO and protocols
- AuthPoint provides an MFA protected application portal and supports cloud application access via SAML and OIDC.checked 11 Oct 2026
- Support
- The AuthPoint MFA subscription includes technical support and feature updates.checked 12 Oct 2026
- Threat response
- WatchGuard says ThreatSync detects push abuse and blocks tokens automatically to address MFA fatigue attacks.checked 11 Oct 2026
Money
- Free plan
- Nochecked 23 Sep 2026
- Subscription billing
- Subscription licenses are invoiced monthly based on user allocation, with volume discounts applied.checked 12 Oct 2026
- Trial
- The free trial lasts 30 days and can enroll up to 250 users.checked 12 Oct 2026
Where it runs
- Mobile app compatibility
- The AuthPoint mobile app supports Android 7.0 and higher and iOS 14.0 and higher.checked 12 Oct 2026
- Platforms
- AuthPoint components include Windows and macOS login apps, and its mobile app supports Android 7.0 and higher and iOS 14.0 and higher.checked 11 Oct 2026
Alternatives to WatchGuard AuthPoint
- 1
Bitwarden
Free planOpen sourceAndroidiOSWebAPI9.3From $1.65 a month - 2
Duo Mobile
Free planAndroidiOS8.5From $3 a month - 3
SAASPASS Authenticator
Free planAndroidiOSWebExtension8.4From $1 a year - 4
LastPass
Free planAndroidiOSWebExtension8.4Free plan - 5
Yubico Authenticator
Free planAndroidiOSLinuxmacOS8.1Free plan - 6
HYPR Authenticate
AndroidiOSWebAPI8.1From $3 a month