Skip Navigation

Configure the
BlackBerry 2FA
server to connect to a VPN gateway

Obtain the IP address and shared secret for the VPN gateways.
  1. In the
    BlackBerry UEM
    management console, on the menu bar, click
    External integration
    BlackBerry 2FA server
  2. Click the
    BlackBerry 2FA
    server that you want to configure a VPN gateway for.
  3. In the
    VPN configuration
    section, click The Add icon.
  4. In the
    VPN server name
    field, type a unique name for the VPN gateway that you are connecting to.
  5. In the
    VPN host
    field, type the IP address of the VPN gateway.
  6. In the
    Shared secret
    Confirm shared secret
    fields, type and confirm the shared secret of the VPN gateway.
  7. Optionally, override the
    BlackBerry 2FA
    app configuration. You can configure the following fields independent of one another. Fields left empty are ignored and the default values in the
    Default device prompt
    section are used.
    1. Select
      BlackBerry 2FA prompt for this VPN
    2. In the
      field, type the title that you want the app to display in its message. For example, "Example Organization's VPN."
    3. In the
      field, type the message that you want the app to display to users. This message explains to users what is required from them.
    4. In the
      Confirm button text
      field, type the text that appears on the button users can tap to confirm second-factor authentication.
    5. In the
      Decline button text
      field, type the text that appears on the button users can tap to decline second-factor authentication.
    6. In the
      Timeout (seconds)
      field, type the amount of time, in seconds, before the authentication transaction expires.
  8. Click
  9. Repeat these steps for each VPN gateway that you want to add.
  10. Click