You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/vpn-gateway/openvpn-azure-ad-tenant.md
+11-9Lines changed: 11 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,17 +1,17 @@
1
1
---
2
-
title: 'Configure Azure AD tenant for P2S VPN connections: Azure AD authentication-OpenVPN'
2
+
title: 'Configure Azure AD tenant and settings for P2S VPN connections: Azure AD authentication: OpenVPN'
3
3
titleSuffix: Azure VPN Gateway
4
4
description: Learn how to set up an Azure AD tenant for P2S Azure AD authentication - OpenVPN protocol.
5
5
author: cherylmc
6
6
ms.service: vpn-gateway
7
7
ms.topic: how-to
8
-
ms.date: 06/14/2022
8
+
ms.date: 07/29/2022
9
9
ms.author: cherylmc
10
10
11
11
---
12
-
# Configure an Azure AD tenant for P2S OpenVPN protocol connections
12
+
# Configure an Azure AD tenant and P2S configuration for VPN Gateway P2S connections
13
13
14
-
When you connect to your VNet using the Azure VPN Gateway point-to-site VPN, you have a choice of which protocol to use. The protocol you use determines the authentication options that are available to you. If you're using the OpenVPN protocol, Azure Active Directory authentication is one of the authentication options available for you to use. This article helps you configure your AD tenant and P2S VPN gateway for Azure AD authentication. For more information about point-to-site protocols and authentication, see [About point-to-site VPN](point-to-site-about.md).
14
+
This article helps you configure your AD tenant and P2S settings for Azure AD authentication. For more information about point-to-site protocols and authentication, see [About VPN Gateway point-to-site VPN](point-to-site-about.md). To authenticate using the Azure AD authentication type, you must include the OpenVPN tunnel type in your point-to-site configuration.
@@ -38,7 +38,7 @@ Verify that you have an Azure AD tenant. If you don't have an Azure AD tenant, y
38
38
39
39
[!INCLUDE [Steps to enable the tenant](../../includes/vpn-gateway-vwan-azure-ad-tenant.md)]
40
40
41
-
### Configure P2S gateway settings
41
+
### Configure point-to-site settings
42
42
43
43
1. Locate the tenant ID of the directory that you want to use for authentication. It's listed in the properties section of the Active Directory page. For help with finding your tenant ID, see [How to find your Azure Active Directory tenant ID](../active-directory/fundamentals/active-directory-how-to-find-tenant.md).
44
44
@@ -47,7 +47,7 @@ Verify that you have an Azure AD tenant. If you don't have an Azure AD tenant, y
47
47
> [!IMPORTANT]
48
48
> The Basic SKU is not supported for OpenVPN.
49
49
50
-
1. Enable Azure AD authentication on the VPN gateway by navigating to **Point-to-site configuration** and picking **OpenVPN (SSL)** as the **Tunnel type**. Select **Azure Active Directory** as the **Authentication type**, then fill in the information under the **Azure Active Directory** section. Replace {AzureAD TenantID} with your tenant ID.
50
+
1. Enable Azure AD authentication on the VPN gateway by going to **Point-to-site configuration** and picking **OpenVPN (SSL)** as the **Tunnel type**. Select **Azure Active Directory** as the **Authentication type**, then fill in the information under the **Azure Active Directory** section. Replace {AzureAD TenantID} with your tenant ID.
51
51
52
52
***Tenant:** TenantID for the Azure AD tenant
53
53
@@ -75,14 +75,16 @@ Verify that you have an Azure AD tenant. If you don't have an Azure AD tenant, y
75
75
76
76
1. Save your changes.
77
77
78
-
1. Create and download the profile by clicking on the **Download VPN client** link.
78
+
1. At the top of the page, click **Download VPN client**. It takes a few minutes for the client configuration package to generate.
79
+
80
+
1. Your browser indicates that a client configuration zip file is available. It's named the same name as your gateway.
79
81
80
82
1. Extract the downloaded zip file.
81
83
82
84
1. Browse to the unzipped “AzureVPN” folder.
83
85
84
-
1. Make a note of the location of the “azurevpnconfig.xml” file. The azurevpnconfig.xml contains the setting for the VPN connection and can be imported directly into the Azure VPN Client application. You can also distribute this file to all the users that need to connect via e-mail or other means. The user will need valid Azure AD credentials to connect successfully.
86
+
1. Make a note of the location of the “azurevpnconfig.xml” file. The azurevpnconfig.xml contains the setting for the VPN connection. You can also distribute this file to all the users that need to connect via e-mail or other means. The user will need valid Azure AD credentials to connect successfully. For more information, see [Azure VPN client profile config files for Azure AD authentication](about-vpn-profile-download.md).
85
87
86
88
## Next steps
87
89
88
-
Create and configure a VPN client profile. See[Configure a VPN client for P2S VPN connections](openvpn-azure-ad-client.md).
90
+
*[Configure a VPN client for P2S VPN connections](openvpn-azure-ad-client.md).
0 commit comments