> For the complete documentation index, see [llms.txt](https://docs.defguard.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.defguard.net/1.4/enterprise/enterprise-features.md).

# Enterprise features

Here is a list of all Enterprise features:

* [Ability to use external OIDC](/1.4/features/external-openid-providers.md) (Google/Microsoft/Okta/JumpCloud/Custom) to login or create Defguard account.
  * Do Multi-Factor Authentication on selected VPN locations with External SSO on Desktop and Mobile clients (from version 1.5).
* [Two-way LDAP & Active Directory synchronization](/1.4/features/ldap-and-active-directory-integration/two-way-ldap-and-active-directory-synchronization.md)
* [Real time sync for client configurations](/1.4/features/remote-user-enrollment/automatic-real-time-desktop-client-configuration.md)! **First WireGuard client to support this feature!**
* Ability to define and enforce [Access Control List rules](/1.4/features/access-control-list.md) / firewall management
* Ability to [stream the Activity & Audit logs to external SIEM systems](/1.4/features/activity-log/activity-log-streaming.md)
* Ability to use [external OIDC for secure remote enrollment and Desktop client configuration](/1.4/features/external-openid-providers/external-oidc-secure-enrollment.md)
* Ability to [disable for users to manage their devices](/1.4/features/wireguard/behavior-customization.md#disable-for-users-to-manage-their-devices) (just admin will have this possibility).
* Ability to [disable for users to configure WireGuard clients other then Defguard desktop client](/1.4/features/wireguard/behavior-customization.md#disable-ability-to-configure-other-vpn-clients-then-defguard-desktop-client).
* Ability to [disable "All traffic" in the desktop client ](/1.4/features/wireguard/behavior-customization.md#disable-all-traffic-option-in-the-desktop-client)- just "predefined" traffic by admins.
* Ability to integrate with external tooling using [REST API](/1.4/features/integrations/api-tokens.md).