screenshot

Author: cherylmc

articles/vpn-gateway/media/openvpn-create-azure-ad-tenant/configuration.png

@@ -1,17 +1,18 @@
 ---
-title: 'Configure a P2S VPN gateway and Microsoft Entra tenant: Microsoft Entra authentication: OpenVPN'
+title: 'Configure P2S VPN gateway for Microsoft Entra ID authentication'
 titleSuffix: Azure VPN Gateway
 description: Learn how to set up a Microsoft Entra tenant and P2S gateway for P2S Microsoft Entra authentication - OpenVPN protocol.
 author: cherylmc
 ms.service: vpn-gateway
 ms.topic: how-to
-ms.date: 03/22/2024
+ms.date: 04/09/2024
 ms.author: cherylmc
 
 ---
-# Configure a P2S VPN gateway and Microsoft Entra tenant for Microsoft Entra authentication
 
-This article helps you configure your AD tenant and P2S (point-to-site) VPN Gateway settings for Microsoft Entra authentication. For more information about point-to-site protocols and authentication, see [About VPN Gateway point-to-site VPN](point-to-site-about.md). To authenticate using the Microsoft Entra authentication type, you must include the OpenVPN tunnel type in your point-to-site configuration.
+# Configure a P2S VPN gateway for Microsoft Entra ID authentication
+
+This article helps you configure your Microsoft Entra tenant and point-to-site (P2S) VPN Gateway settings for Microsoft Entra ID authentication. For more information about point-to-site protocols and authentication, see [About VPN Gateway point-to-site VPN](point-to-site-about.md). To authenticate using Microsoft Entra ID authentication, you must include the OpenVPN tunnel type in your point-to-site configuration.
 
 [!INCLUDE [OpenVPN note](../../includes/vpn-gateway-openvpn-auth-include.md)]
 
@@ -22,7 +23,7 @@ The steps in this article require a Microsoft Entra tenant. If you don't have a
 * Organizational name
 * Initial domain name
 
-If you already have an existing P2S gateway, the steps in this article help you configure the gateway for Microsoft Entra authentication. You can also create a new VPN gateway that specifies Microsoft Entra authentication. The link to create a new gateway is included in this article.
+If you already have an existing P2S gateway, the steps in this article help you configure the gateway for Microsoft Entra ID authentication. You can also create a new VPN gateway. The link to create a new gateway is included in this article.
 
 <a name='create-azure-ad-tenant-users'></a>
 
@@ -40,7 +41,7 @@ If you already have an existing P2S gateway, the steps in this article help you
 
 [!INCLUDE [Steps to authorize the Azure VPN app](../../includes/vpn-gateway-vwan-azure-ad-tenant.md)]
 
-## <a name="enable-authentication"></a>Configure the VPN gateway - Entra authentication
+## <a name="enable-authentication"></a>Configure the VPN gateway
 
 > [!IMPORTANT]
 > [!INCLUDE [Entra ID note for portal pages](../../includes/vpn-gateway-entra-portal-note.md)]
@@ -59,14 +60,14 @@ If you already have an existing P2S gateway, the steps in this article help you
    * **Tunnel type:** OpenVPN (SSL)
    * **Authentication type**: Microsoft Entra ID
 
-   For **Microsoft Entra ID** values, use the following guidelines for **Tenant**, **Audience**, and **Issuer** values. Replace {AzureAD TenantID} with your tenant ID, taking care to remove **{}** from the examples when you replace this value.
+   For **Microsoft Entra ID** values, use the following guidelines for **Tenant**, **Audience**, and **Issuer** values. Replace {TenantID} with your tenant ID, taking care to remove **{}** from the examples when you replace this value.
 
    * **Tenant:** TenantID for the Microsoft Entra tenant. Enter the tenant ID that corresponds to your configuration. Make sure the Tenant URL doesn't have a `\` (backslash) at the end. Forward slash is permissible.
 
-     * Azure Public AD: `https://login.microsoftonline.com/{AzureAD TenantID}`
-     * Azure Government AD: `https://login.microsoftonline.us/{AzureAD TenantID}`
-     * Azure Germany AD: `https://login-us.microsoftonline.de/{AzureAD TenantID}`
-     * China 21Vianet AD: `https://login.chinacloudapi.cn/{AzureAD TenantID}`
+     * Azure Public AD: `https://login.microsoftonline.com/{TenantID}`
+     * Azure Government AD: `https://login.microsoftonline.us/{TenantID}`
+     * Azure Germany AD: `https://login-us.microsoftonline.de/{TenantID}`
+     * China 21Vianet AD: `https://login.chinacloudapi.cn/{TenantID}`
 
    * **Audience**: The Application ID of the "Azure VPN" Microsoft Entra Enterprise App.
 
@@ -77,7 +78,7 @@ If you already have an existing P2S gateway, the steps in this article help you
 
    * **Issuer**: URL of the Secure Token Service. Include a trailing slash at the end of the **Issuer** value. Otherwise, the connection might fail. Example:
 
-     * `https://sts.windows.net/{AzureAD TenantID}/`
+     * `https://sts.windows.net/{TenantID}/`
 
 1. Once you finish configuring settings, click **Save** at the top of the page.