Easy to implement MFA, with little maintenance work, and best of all, it's not that expensive.

WatchGuard AuthPoint works fine now, it's compatible with some devices and provides a lot of solutions for security issues. This tool is hugely compatible with other security infrastructure players allowing it to use on large scale. Authpoint is an MFA tool, the advantage of this tool is the flexibility to implement tokens in mobile smartphones and physical tokens of other manufactures. When we start to use WatchGuard AuthPoint, we had some issues, in our Active Directory integration with more than 60.000 objects, but WatchGuard support solve this problem quickly.

All Authpoint services are cloud, the first time you activate you can choose the location you want to deploy. You must have a physical server if you want to synchronize Active Directory users or if you need RADIUS implementation, in which case you don't need to worry or configure the software because the local installation has no console to access, Authpoint works as a service.

The activation process is easy, first, the user receives an email with instructions to activate the mobile app. The activation process can be done by the end-user without contacting support. You can use the Authpoint app on other token types like google or Microsoft. It is important to note that the end-user can switch devices and move the token without contacting support.

I don't think it happens like that, as far as I know, users still need to use a username and password to log in and after approving the MFA.