How to Enroll Users in Barracuda SecureEdge

Barracuda SecureEdge allows administrators to enroll users/groups with their respective devices. The Barracuda SecureEdge Zero Trust Network Access (ZTNA) Agent uses certificate authentication to connect to and establish a TINA tunnel against either a gateway or a nominated static WAN on a site box. The Barracuda SecureEdge Agent allows users or groups of users to connect to different resource types including custom apps or public endpoints such as SaaS services. After a user/group is enrolled, an enrollment link is sent to the user for downloading and installing the Barracuda SecureEdge Agent. In addition, users can now enroll devices without requiring an enrollment link. For every new account you get five user trials for SecureEdge Access. For more information, see How to Get a SecureEdge Trial Subscription. With mass enrollment, you can do the following:

• You can enroll a group of users 
• You can enroll a group of users when some of the users are already enrolled
• You can enroll multiple groups and users at the same time
• You can enroll groups/users without an email being sent to the users
• You can launch the SecureEdge Access Agent and log in either with or without enrollment link

Before You Begin

• Create a Barracuda Cloud Control account. For more information, see Create a Barracuda Cloud Control Account.
• Subscribe to the Barracuda Networks for (SaaS) SecureEdge Access service. For more information on the product activation procedure, see How to Activate the Edge Service and SecureEdge Access Using an Activation Key. After completing the activation process for your product, verify your subscription on the Barracuda SecureEdge Manager via the Profile > Subscriptions page.
• If you want to use the users or groups from user directories (such as Microsoft Entra ID, LDAP, Google Workspace, Okta, and Barracuda Cloud Control) for SecureEdge Access, you must first connect your SecureEdge Identity Management in order to synchronize users and groups. For more information, see Identity Management. 

• If you want to select users or groups from user directories such as BCC-linked Microsoft Entra ID or the BCC-linked LDAP directory in the SecureEdge Access, you must first connect your directory with Barracuda Cloud Control in order to synchronize users and groups. For more information, see LDAP Active Directory and Microsoft Entra ID and How to Connect Microsoft Entra ID with Barracuda Cloud Control.

Step 1. Users/Groups Enrollment

1. Go to https://se.barracudanetworks.com/ and log in with your existing Barracuda Cloud Control account.
2. In the left menu, click the Tenants/Workspaces icon.
3. From the drop-down menu, select the workspace you want to enroll in.
   
4. In the left menu, click Access and select Enrolled Users. 
   

5. The Enrolled Users page opens. To enroll a new user, click Enroll users. 
   

6. The Enroll Users window opens. For Secure Edge Access, you must first verify the availability of seats to your SecureEdge Access account and then add users or groups accordingly.
7. Specify the values for the following:
   • Users – Add a valid user email address from the drop-down menu. 

   • Groups – Select groups from the drop-down menu.

     For SecureEdge Access, the number of Users/Groups you can enroll depends on the availability of seats to your SecureEdge Access subscription .

       In the USER NOTIFICATION (OPTIONAL) section, specify the value for the following:

     • Enrollment Email – Click to enable/disable.
       
       • If Enrollment Email is enabled, the SecureEdge Access Agent enrollment link is provided to the selected users or groups, and the Invite Message field is enabled. 
         • Invite Message – Enter an email subject.
       • If Enrollment Email disabled, the SecureEdge Access Agent enrollment link is not provided, and the Invite Message field is disabled. For example, in this case, Enrollment Email is disabled.
         
8. Click Enroll.
9. The Enroll Users page opens. For mass enrollment, verify the number of enrolled users in a specific group. For example, in this case, the Group Engineering has a total of 13 members and 3 of them are already enrolled.
   
10. Click Finish.

After completing the enrollment process, the selected users or groups will be in the pending enrollment state on the Users page. The admin then installs the SecureEdge Access Agent on the user devices, such as laptop and mobile. As soon as the user launches the SecureEdge Access Agent, a prompt appears requiring the user email address. After pressing Continue, the user is re-directed to log in with their existing Barracuda Cloud Control account. User credentials are verified and authenticated, and the SecureEdge Access Agent is enrolled. 

(Optional) User Notification

You can enable a user notification for a specific user/group:

1. In the Enroll Users window, click to enable Enrollment Email and specify the following:
   • Invite Message – Enter an email subject. Note: if Enrollment Email is disabled, you will not receive any SecureEdge Access Agent enrollment link, and the Invite Message field is disabled. 
     
2. Click Next. You will get a confirmation message on the Enroll Users page.

3. Click Send.
   
   The enrollment link is sent to the user via email.

4. Click Finish.
   

After configuration is complete, you will see that a new user has been enrolled with DEVICE COUNT = 0 and the ENROLLMENT COMPLETED status as pending (you will see a question mark). You are now ready to proceed with Step 2.

(Optional) Copy the Link or Resend the Invitation

If you must resend the enrollment invitation or link, proceed with the following steps:

1. On the Users page, click the icon of three vertical dots to either copy the enrollment link or resend invitation.
   
2. You have two options:

• • Copy Enrollment Link – To copy the enrollment link, select Copy Enrollment Link and send it to user.
  • Re-Send Invite – To resend the enrollment invitation to the same user, select Re-send Invite.

Step 2. Connect a Barracuda SecureEdge Agent

Install the Barracuda SecureEdge Agent. 

1. Open the link for enrollment retrieved in Step 1 and download the SecureEdge Agent from the Windows App Store. 
   
   The Barracuda SecureEdge Agent displays, and the Welcome to SecureEdge Agent page opens. 
2. Click Ready to Start.
   
3. On the next page, click on the email enrollment link to continue.
   
4. To complete enrollment process, click Enroll. 
   
   The Barracuda SecureEdge Agent displays, and the Enterprise Enrollment page opens.
5.  Click Accept.
   
6. The AUTHENTICATE page opens. Click Authenticate to verify your user identity.
   
7. Authenticate with your identity provider. For Microsoft Entra ID, click Sign in with Microsoft. Note: If you are already signed in with Microsoft SSO, enable Open in browser on the AUTHENTICATE page, and you will be automatically logged in to your account.
   
   The Welcome to SecureEdge Agent page opens. 
8. Verify Enterprise Enrollment status and click Ready to Start.
   
9. The device protection is enabled automatically.
   
10. At the bottom of the navigation bar, click the Barracuda SecureEdge Agent icon. The Overview page opens and shows the status of your device.
    
11. After completing the enrollment procedure, your device is protected. On the Enrolled Users page, you can see the status of the field names, e.g., DEVICE COUNT =1 and ENROLLMENT COMPLETED.
    

Remove an Enrolled User

1. In the left menu, click the Access icon, and select Enrolled Users.
2. Click on the trash can icon next to the user you want to remove.
   
3. The Unenroll User window opens.
   

4. Click OK to confirm.

(Optional) Enable/Disable Device Protection

1. At the bottom of the navigation bar, open the Barracuda SecureEdge Agent icon. For more information, see Barracuda SecureEdge Agent.
2. In the Overview window, click Enable Protection.
   
3. Your device protection is enabled.
   
4. To disable device protection, click the Settings icon.
5. The Settings page opens. Disable Protection Enabled. 
   
6. Your device protection has been successfully disabled.

Next Steps

How to Verify Enrolled Devices and Users