# Enrollment & Onboarding

The enrollment process depends on your configuration:

1. If you are using[ internal Defguard's SSO](https://docs.defguard.net/2.0/using-defguard-for-end-users/enrollment/with-internal-defguard-sso) - then most probably Defguard is also the SSO for all your application access, meaning with Defguard's account you not only access/configure VPN but also log in to other applications. Then the process includes setting up your account as well as configuring VPN. [More details here.](https://docs.defguard.net/2.0/using-defguard-for-end-users/enrollment/with-internal-defguard-sso)
2. If you are using an [external SSO to login to Defguard](https://docs.defguard.net/2.0/using-defguard-for-end-users/enrollment/with-external-sso-google-microsoft-custom) (Google/Microsoft/Custom), then Defguard only is responsible for the VPN, and only VPN client is configured. [More details here.](https://docs.defguard.net/2.0/using-defguard-for-end-users/enrollment/with-external-sso-google-microsoft-custom)