GITBOOK-291: change request with no subject merged in GitBook

Author: defguard-community

.gitbook/assets/Screenshot 2024-11-15 at 18.48.20.png

@@ -12,7 +12,7 @@ Defguard is a **comprehensive Remote Access Management solution** incorporating
 
 * Remote Access secured by [WireGuard® VPN with 2FA/Multi-Factor Authentication](admin-and-features/features-and-configuration/wireguard/),
 * Identity Management with [SSO based on OpenID Identity Provider](admin-and-features/features-and-configuration/openid-connect/),
-* Account Lifecycle management with [secure remote account onboarding](help/enrollment.md).
+* Account Lifecycle management with [secure remote account onboarding](help/enrollment/).
 
 ***
 

.gitbook/assets/Screenshot 2024-11-15 at 18.49.54 (1).png

@@ -10,7 +10,9 @@
   * [Other WireGuard® Clients](help/configuring-vpn/adding-wireguard-devices/README.md)
     * [Configuring manually a device for a new VPN Location](help/configuring-vpn/adding-wireguard-devices/configuring-a-device-for-a-new-vpn-location.md)
 * [Password change / Reset](help/changing-your-password.md)
-* [Enrollment & Onboarding](help/enrollment.md)
+* [Enrollment & Onboarding](help/enrollment/README.md)
+  * [With internal Defguard SSO](help/enrollment/with-internal-defguard-sso.md)
+  * [With external SSO (Google/Microsoft/Custom)](help/enrollment/with-external-sso-google-microsoft-custom.md)
 * [Setting up 2FA/MFA](help/setting-up-2fa-mfa.md)
 * [Desktop Client](help/desktop-client.md)
 

.gitbook/assets/Screenshot 2024-11-15 at 18.49.54.png

@@ -508,7 +508,7 @@ On the other side, core service should print those informations:
 
 ### Proxy - enrollment, onboardin and desktop configuration service
 
-To run proxy service (for [remote onboarding & enrollment](../../help/enrollment.md)), we can do it by:
+To run proxy service (for [remote onboarding & enrollment](../../help/enrollment/)), we can do it by:
 
 ```
 # systemctl enable defguard-proxy.service

.gitbook/assets/Screenshot 2024-11-15 at 18.52.56.png

@@ -11,15 +11,15 @@ The same url you have used to do your remote enrollment & onboarding has the fun
 <figure><img src="../.gitbook/assets/password-reset.pg.png" alt=""><figcaption><p>Password reset in enrollment service</p></figcaption></figure>
 
 {% hint style="info" %}
-The enrollemnt service URL should be avaialbe in the onboarding email you have received when finishing the [onboarding\&enrollment process.](enrollment.md)
+The enrollemnt service URL should be avaialbe in the onboarding email you have received when finishing the [onboarding\&enrollment process.](enrollment/)
 {% endhint %}
 
 #### By admin
 
 Ask your administrator to send you the password reset link.&#x20;
 
 {% hint style="info" %}
-You should have you admin contact data on the onboarding message that was sent automatically after you have finished the [onboarding\&enrollment process.](enrollment.md)
+You should have you admin contact data on the onboarding message that was sent automatically after you have finished the [onboarding\&enrollment process.](enrollment/)
 {% endhint %}
 
 ## Changing your password in defguard

README.md

@@ -0,0 +1,6 @@
+# Enrollment & Onboarding
+
+The enrollment proces depends on your configuration:
+
+1. If you are using[ internal defguard's SSO](with-internal-defguard-sso.md) - then most probably defguard is also the SSO for all your application access, meaning with defguard's account you not only access/configure VPN but also log in to other applications. Then the process includes setting up your account as well as configuring VPN. [More details here.](with-internal-defguard-sso.md)
+2. If you are using an [external SSO to login to defguard](with-external-sso-google-microsoft-custom.md) (Google/Microsoft/Custom), then defguard only is responsible for the VPN, and only VPN client is configured. [More details here.](with-external-sso-google-microsoft-custom.md)

SUMMARY.md

@@ -0,0 +1,21 @@
+# With external SSO (Google/Microsoft/Custom)
+
+{% hint style="info" %}
+This features is available from Defguard 1.1
+{% endhint %}
+
+In this scenario defguard is only the VPN system and enrollment is used just to obtain credentials to configure the [Defguard Desktop Client](../configuring-vpn/add-new-instance/).
+
+Please go to the enrollment URL, like: https://enrollment.company.com and choose Enrollment:
+
+<figure><img src="../../.gitbook/assets/Screenshot 2024-11-15 at 18.48.20.png" alt="" width="563"><figcaption></figcaption></figure>
+
+Then all you have to do is click on your SSO login - the button name depends on the SSO you have configured:
+
+<figure><img src="../../.gitbook/assets/Screenshot 2024-11-15 at 18.49.54 (1).png" alt=""><figcaption></figcaption></figure>
+
+Now log in with your SSO and after successful login process, you will receive information how to configure your desktop client:
+
+<figure><img src="../../.gitbook/assets/Screenshot 2024-11-15 at 18.52.56.png" alt=""><figcaption></figcaption></figure>
+
+Download the [defguard desktop client](https://defguard.net/download/), and [enter _Instance URL_ and _token_ shown on this screen - more details here](../configuring-vpn/#automatic-with-defguard-client).