I am currently configuring LogonApp in my lab environment using the trial version and have encountered a few issues during the setup.

For local users, the LogonApp returns error 5433, even though the account has been configured as a non-MFA user and the policy allows non-MFA authentication. Despite this configuration, the same error continues to appear during logon.

For Active Directory users, the system displays a “user not found” message, although the users are correctly present in the domain and appear to be synchronized.

During my research, I came across information suggesting that a Group Policy Object (GPO) may need to be configured on the domain for the LogonApp agent to function properly. However, I was unable to find any reference to this configuration step in the videos available on the Learning Center.

I would appreciate your assistance in confirming whether a specific GPO configuration is required and in guiding me through the correct setup for this part of the implementation.

Thank you in advance for your support.

Kind regards,

This thread: https://community.watchguard.com/watchguard-community/discussion/2678/authpoint-error-code-402-003-311
Mentioned that there will be a error code list soon, but it's from 2022. is the list available?

I have a strange issue where we when we try to start the authpoint service, I get an error 1067 and it crashes unexpectedly. We currently can't sync as it won't connect. If anyone has experience this before and found a solution, please let me know!

            AzureAdPrt : NO
   AzureAdPrtAuthority :
 AcquirePrtDiagnostics : PRESENT
  Previous Prt Attempt : 2026-01-20 18:54:07.221 UTC
        Attempt Status : 0xc000005f
         User Identity : XXXXXXXXXXX@XXXXXXXX.com
       Credential Type : Password
        Correlation ID : 4dd6a308-400b-4090-a3de-edb149c3d6ce
          Endpoint URI : https://login.microsoftonline.com/b9b8fda3-3026-4e58-81b3-6477129829ff/oauth2/token
           HTTP Method :
            HTTP Error : 0x0
           HTTP status : 200
     Server Error Code :

Server Error Description :
EnterprisePrt : NO

Any advice would be appreciated!

New to Auth Point so two questions sorry!

I've configured the RD Web connection which works OK when I use the old "Internet Explorer" interface RD Web. When I use the new HTML/5 RD Web interface Auth Point is completely bypassed and the users can log straight in. We've users connecting from Mac's and other browsers so need to use HTML/5 plus the old interface is pain for users with no SSO.

Is there a way to enable Auth Point within the HTML/5 interface please?

Thanks

Andy.

We have users connecting to Remote Desktop using MSTSC (RDP) shortcuts not RD Web as these are all internal PC's. We have the logon app on the RD Hosts which works fine.

However, when running mstsc the user logs in with the RD client and they now go to the Windows login screen where they have to login again before getting the MFA challenge.

Has anyone found a way around this so users just have to enter their credentials once?

Thanks

Andy.

We use Authpoint for our administrators on our servers.
We have now noticed that logging in as a local administrator does not work.
The local administrator account is only a backup in a worst-case scenario.

Is it possible to create a question for local administrators? If so, where?

Thank you very much!

I'm testing the new Agent 4.0 version for Windows with mixed results. The release notes states:

Agent for Windows v4.0 — Release Date: 23 May 2024
Enhancements

When you authenticate with OTP, the Logon app now automatically makes the OTP field active so you do not have to select the field before you can enter your one-time password. [AAAS-26564]

I found 3 problems:

1. The Release Date on the Authpoint release website ( https://www.watchguard.com/support/release-notes/Cloud/Content/en-US/AuthPoint/agent_releases.html) is wrong
2. the app doenst make the OTP field active, you still have to click in the first number field to enter the code
3. the "Enter" key on the numeric keypad does not work, i can enter the numbers but have to use the return key

Regards

Marko

Some Questions:
Can Authpoint be configured in a way to handle the gateways offline so M365 apps are assessible? I've looked into this in the past and was told the solution was to rollback federation temporarily or give each user 2 tokens.

I have a user synced from Azure from an external identity for Entra, but it will not authenticate.

Audit Log Detail
Date/Time
2025-08-18 16:16:47
User
TestUserAzure@******.com
IP Address
usa.cloud.watchguard.com
Source
AUTH
Category
SAML
Sub-Category
LDAP
Action
UNAUTHORIZED
Target
AADSaml

Details
Origin IP: x.x.x.x
Reason: MFA did not authorize.
Error: 201.005.001 - MFA did not authorize.
Request Id: 437818fc-3f6c-471c-a9de-7c22011e8f03
Policy Used: Entra_MFA
Location Data Accuracy: Low (distance not available)
Origin Location: Minneapolis, Minnesota, United States

Entra_MFA policy points to test group user is part of. Resource for policy is AADSaml

Any advice would be appreciated!

Following the announcement of the end of life for the AuthPoint password manager, I need to transition my company to a new password management solution.

I would like to know if there is a way to export all the data stored in AuthPoint. While I have found an option to export private tabs, I am unsure if it is possible to export the corporate tab in the export menu, I am unable to modify or select the password list for export.

Thank you for your help.

Does anyone has the experience to get authpoint radius authentication combined with Microsoft Remote Desktop gateway working?

Regards,

Thanks in advance.

I purchased a license for authpoint and activated it. But when I try to login my imac computer it gives following error.

The Authpoint license for this account is expired. Contact your Authpoint administrator or service provider.
What should I do?

Is there a way to use AuthPoint MFA with WSM and Policy Manager. I see documentation to configure AuthPoint with WebUI, but I'm not finding anything that specifically mentions WSM or Policy Manager. I saw a old post in this community where James Carson mentioned that AuthPoint support for the FireboxDB was a current open Feature request back in 2019. Any update on that would be appreciated.

https://community.watchguard.com/watchguard-community/discussion/534/firewalls-admin-interface-via-mfa

I've been a WSM user for almost 20 years and rarely use WebUI. Maybe its time to start using WebUI? Is WebUI the future for Watchguard administration or is WSM here to stay as well?

I would appreciate direction on what we might be missing.

User gets the push notification presses approve and gets authentication error 402.003.311 one time password got the user in but I would like to fix his issue if I can.

The Audit Logs and Notification do not receive the issue, anyone know what causes this error?

is it possible to use the KeepassXC software token for MFA login to Access Portal or VPN Connections?

Best

With Windows I used OPENVPN, which worked fine.

But using openvpn3 with linux, after entering username and password I get my Authpoint push request again and again.

Is there any recommended program that works properly under this conditions?

Thank you and kind regards from Germany
Markus

We have purchased some Feitian c200s and received a seed file. It has been some years since we had to add any tokens.

We received a PDF that we rename with the zip extension and a password. That contains a simple text file with the token serial numbers and the secrets for each token.

I am stuck in a three way battle with Feitian saying that is all we need and Watchguard saying it needs to be in PSKC format with a key to unlock it.

What am I missing. There isn't any way to use the zip file in the import process. Do I need to encrypt the seed file myself with something akin to OpenSSL? I could use some help getting this squared away.

Note:

In the past they sent an XML file with a private key bin file, and that worked fine. Now they just send the txt file with no PSKC formatting. Talking to them is like talking to a brick wall.

Thanks

Glenn

Date/Time
2022-03-24 09:59:49
User
<user's email address>
IP Address
usa.cloud.watchguard.com
Source
AUTH
Category
RADIUS
Sub-Category
LDAP
Action
UNAUTHORIZED
Target
Dimension

Details
Reason: MFA did not authorize.
Error: 201.005.001 - The authentication attempt is not authorized.
Request Id: b062b803-0078-4d22-86fd-05b64ba01d7a
Policy Used: WG Dimension
Origin Location: not available