The enrollment process depends on your configuration:
If you are using internal Defguard's SSO - then most probably Defguard is also the SSO for all your application access, meaning with Defguard's account you not only access/configure VPN but also log in to other applications. Then the process includes setting up your account as well as configuring VPN. More details here.