There are some cases where users will have to set up the off-site MFA logon manually.
The If for some reason the public URL of the computer logon agents cannot be agent is downloaded to the user's computer automatically, or logon client automatically when the logon client connects to the logon agent. Typically, this happens when the user makes an on-site login. If a user cannot make an on-site login at all, then the user has to manually enter the public URL of the logon agent in to their logon clients.
In the case where If you do not want to add an A record to your public DNS records, then your users will have to manually set up their DualShield computer logon clients in order to carry out MFA for offsite logins. enter the public URL of the logon agent in to their logon clients.
To manually set up offsite MFA logon, visit the User Console at http://localhost:12845
...