diff --git a/modules/sasl.cpp b/modules/sasl.cpp
index d2a2f9df..80687660 100644
--- a/modules/sasl.cpp
+++ b/modules/sasl.cpp
@@ -23,7 +23,7 @@ static const struct {
 	const char *szDescription;
 	const bool  bDefault;
 } SupportedMechanisms[] = {
-	{ "EXTERNAL",           "TLS certificate, for use with the *cert module", false },
+	{ "EXTERNAL",           "TLS certificate, for use with the *cert module", true },
 	{ "PLAIN",              "Plain text negotiation, this should work always if the network supports SASL", true }
 };