---
title: 'Tutorial: Use CloudConnexa with a Mix of Authentication Methods'
canonical: https://openvpn.net/cloud-docs/tutorials/use-case-tutorials/remote-access---ztna/tutorial--use-cloudconnexa-with-a-mix-of-authentication-methods/
product: CloudConnexa Docs
description: Configure CloudConnexa to use Multiple Authentication Methods (MAM) — authenticate employees via SAML/SSO while external users sign in with CloudConnexa username and password plus 2FA, all within the same WPC.
---

# Tutorial: Use CloudConnexa with a Mix of Authentication Methods

## Overview

This tutorial shows you how to configure different authentication methods for different users while allowing everyone to securely access your private network. If your WPC uses **SAML/SSO** for employees but you need to onboard external users — such as contractors, auditors, or partners — without adding them to your identity provider, you can run both authentication methods simultaneously in the same WPC.

This configuration uses **Multiple Authentication Methods (MAM)** to allow employees to authenticate with SAML while external users authenticate with **CloudConnexa Username & Password**, with optional two-factor authentication (2FA).

## Before you begin

Before starting this tutorial:

- You have a [CloudConnexa WPC](https://openvpn.net/cloud-docs/tutorials/use-case-tutorials/networking/tutorial--create-multiple-overlay-networks.md) configured.
- [SAML authentication](https://openvpn.net/cloud-docs/tutorials/configuration-tutorials/authentication/saml.md) is already configured for your employees.
- You have Owner or Administrator permissions.
- You have the names and email addresses of the external users you want to add.
- You've created a **[User Group](https://openvpn.net/cloud-docs/owner/users/users---groups/add-a-user-group.md)** for the external users.
- You've created the **[Network](https://openvpn.net/cloud-docs/owner/networks/networks---networks/add-a-network-for-remote-access-using-the-network-wizard.md)** with the private network resources the external users should be allowed to access.

## Procedure

1. Sign in to the CloudConnexa Administration Portal using your WPC's **Cloud ID** address (for example, `yourcompany.openvpn.com`).
2. Enable MAM. For instructions, refer to [How to enable MAM](https://openvpn.net/cloud-docs/owner/settings/settings---user-authentication/about-multiple-authentication-methods/#how-to-enable-mam).
3. Enable 2FA for CloudConnexa Username & Password users. Refer to [Set 2FA for Users](https://openvpn.net/cloud-docs/owner/settings/settings---user-authentication/set-two-factor-authentication--2fa--for-users.md).
4. Add the external users to your WPC. Refer to [Add Users](https://openvpn.net/cloud-docs/owner/users/users---users/add-a-user.md). When creating each user:
   - Assign the user to the **User Group** for external users.
   - Select **Send invitation email**. The invitation email includes the Cloud ID, username, temporary password, and instructions for connecting.
5. Create an **Access Group** that uses the external users' **User Group** as the **Source** and the private network resources they need as the **Destination**. For instructions, see [Add an Access Group](https://openvpn.net/cloud-docs/owner/access/access---groups/add-an-access-group-to-allow-access.md).

### Result

Employees continue to authenticate using **SAML/SSO**, while external users authenticate using **CloudConnexa Username & Password**. External users can access only the resources allowed by the Access Group you created.

## See also

- [About Multiple Authentication Methods](https://openvpn.net/cloud-docs/owner/settings/settings---user-authentication/about-multiple-authentication-methods.md)
- [About User Authentication](https://openvpn.net/cloud-docs/owner/settings/settings---user-authentication/about-user-authentication.md)
- [Set SAML Single Sign-On Authentication for Users](https://openvpn.net/cloud-docs/owner/settings/settings---user-authentication/set-saml-single-sign-on-authentication-for-users.md)
- [Set CloudConnexa Username & Password Authentication for Users](https://openvpn.net/cloud-docs/owner/settings/settings---user-authentication/set-cloudconnexa-username---password-authentication-for-users.md)
- [Set Two-Factor Authentication (2FA) for Users](https://openvpn.net/cloud-docs/owner/settings/settings---user-authentication/set-two-factor-authentication--2fa--for-users.md)
- [Tutorial: Authenticate Using SAML with Okta](https://openvpn.net/cloud-docs/tutorials/configuration-tutorials/authentication/saml/tutorial--authenticate-using-saml-with-okta.md)
- [Tutorial: Authenticate Using SAML with Microsoft Entra ID](https://openvpn.net/cloud-docs/tutorials/configuration-tutorials/authentication/saml/tutorial--authenticate-using-saml-with-microsoft-entra-id.md)
- [Tutorial: Authenticate Using SAML with Google Workspace](https://openvpn.net/cloud-docs/tutorials/configuration-tutorials/authentication/saml/tutorial--authenticate-using-saml-with-google-workspace.md)
- [Tutorial: Authenticate Using SAML with JumpCloud](https://openvpn.net/cloud-docs/tutorials/configuration-tutorials/authentication/saml/tutorial--authenticate-using-saml-with-jumpcloud.md)
- [Tutorial: Authenticate Using SAML with Keycloak](https://openvpn.net/cloud-docs/tutorials/configuration-tutorials/authentication/saml/tutorial--authenticate-using-saml-with-keycloak.md)
- [Tutorial: Authenticate Using SAML with OneLogin](https://openvpn.net/cloud-docs/tutorials/configuration-tutorials/authentication/saml/tutorial--authenticate-using-saml-with-onelogin.md)
- [SAML User Group Mapping Rules](https://openvpn.net/cloud-docs/owner/settings/settings---user-authentication/set-saml-single-sign-on-user-group-mapping-rules.md)

---

Prev: [Tutorial: Enable device posture check for Linux OpenVPN client](https://openvpn.net/cloud-docs/tutorials/use-case-tutorials/remote-access---ztna/tutorial--enable-device-posture-check-for-linux-openvpn-client.md)
Next: [Tutorial: Secure OpenClaw with CloudConnexa](https://openvpn.net/cloud-docs/tutorials/use-case-tutorials/remote-access---ztna/tutorial--secure-openclaw-with-cloudconnexa.md)
Index: https://openvpn.net/cloud-docs/llms.txt