Directory
Connect the identity sources MFA resolves users and groups from — the same Identity configuration shared with RADIUS, so you set it up once.
What you can connect
- Local DashX users — self‑contained accounts.
- Active Directory / LDAP — bridged via a broker agent on your LAN (domain controller host, Base DN, Bind DN, group mappings).
- Cloud directories — Entra / Azure AD, Google Workspace, and similar.
Using it
- Go to Network → MFA → Directory.
- Add or edit an identity source (see Identity for the full field‑by‑field setup — this is the same panel).
- Once connected, target MFA Policies at directory groups, and enroll directory users under Users & Factors.
note
Because MFA and RADIUS share the directory, a group you define here also works for network access policies — one source of truth for both.