Skip to content

Commit 83e97f5

Browse files
Merge pull request #283699 from cherylmc/entra-updates
VPN Gateway add links
2 parents 1eb1637 + dcc612e commit 83e97f5

File tree

4 files changed

+13
-11
lines changed

4 files changed

+13
-11
lines changed

articles/vpn-gateway/point-to-site-entra-gateway-update.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -5,22 +5,22 @@ description: Learn how to update Audience values for P2S VPN gateway connections
55
author: cherylmc
66
ms.service: azure-vpn-gateway
77
ms.topic: how-to
8-
ms.date: 07/24/2024
8+
ms.date: 08/06/2024
99
ms.author: cherylmc
1010

1111
# Customer intent: As an VPN Gateway administrator, I want to update point-to-site Audience values for Microsoft Entra ID authentication.
1212
---
1313

1414
# Migrate a manually registered Azure VPN Client to the Microsoft-registered client
1515

16-
This article helps you migrate from a manually registered Azure VPN Client to the Microsoft-registered Azure VPN Client for point-to-site (P2S) Microsoft Entra ID authentication. The Microsoft-registered Azure VPN client uses a different Audience value. When you update an Audience value, you must make the change on both the P2S VPN gateway, and on any previously configured VPN clients.
17-
18-
For more information about Audience values, see [About point-to-site VPN - Microsoft Entra ID authentication](point-to-site-about.md#entra-id). The examples in this article use the new Audience value for Azure Public.
16+
This article helps you migrate from a manually registered Azure VPN Client to the Microsoft-registered Azure VPN Client for point-to-site (P2S) Microsoft Entra ID authentication. The Microsoft-registered Azure VPN client uses a different Audience value. When you update an Audience value, you must make the change on both the P2S VPN gateway, and on any previously configured VPN clients. For more information about Audience values, see [About point-to-site VPN - Microsoft Entra ID authentication](point-to-site-about.md#entra-id).
1917

2018
The following table shows the available supported Audience values.
2119

2220
[!INCLUDE [Audience values](../../includes/vpn-gateway-entra-audience-values.md)]
2321

22+
The examples in this article use the new Audience value for Azure Public. This article doesn't apply to **custom Audience** value configurations. To modify a custom audience app ID, see [Create or modify a custom audience app ID for P2S VPN Microsoft Entra ID authentication](point-to-site-entra-register-custom-app.md#change).
23+
2424
## Workflow
2525

2626
The standard workflow is:

articles/vpn-gateway/point-to-site-entra-gateway.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,14 +6,14 @@ author: cherylmc
66
ms.service: azure-vpn-gateway
77
ms.custom: linux-related-content
88
ms.topic: how-to
9-
ms.date: 07/24/2024
9+
ms.date: 08/06/2024
1010
ms.author: cherylmc
1111
# Customer intent: As an VPN Gateway administrator, I want to configure point-to-site to allow Microsoft Entra ID authentication using the Microsoft-registered Azure VPN Client APP ID.
1212
---
1313

1414
# Configure P2S VPN Gateway for Microsoft Entra ID authentication – Microsoft-registered app
1515

16-
This article helps you configure your point-to-site (P2S) VPN gateway for Microsoft Entra ID authentication using the new Microsoft-registered Azure VPN Client App ID.
16+
This article helps you configure your point-to-site (P2S) VPN gateway for Microsoft Entra ID authentication using the new Microsoft-registered Azure VPN Client App ID.
1717

1818
> [!NOTE]
1919
> The steps in this article apply to Microsoft Entra ID authentication using the new Microsoft-registered Azure VPN Client App ID and associated Audience values. This article doesn't apply to the older, manually registered Azure VPN Client app for your tenant. For the manually registered Azure VPN Client steps, see [Configure P2S using manually registered VPN client](openvpn-azure-ad-tenant.md).
@@ -86,7 +86,7 @@ The client address pool is a range of private IP addresses that you specify. The
8686

8787
* Azure Public: `https://login.microsoftonline.com/{Microsoft ID Entra Tenant ID}`
8888

89-
* **Audience**: The corresponding value for the Microsoft-registered Azure VPN Client App ID. Custom audience is also supported for this field.
89+
* **Audience**: The corresponding value for the Microsoft-registered Azure VPN Client App ID. [Custom audience](point-to-site-entra-register-custom-app.md) is also supported for this field.
9090

9191
* Azure Public: `c632b3df-fb67-4d84-bdcf-b95ad541b5c8`
9292

articles/vpn-gateway/point-to-site-entra-register-custom-app.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,15 @@
11
---
22
title: Create custom app ID for P2S VPN Microsoft Entra ID authentication
33
titleSuffix: Azure VPN Gateway
4-
description: Learn how to create a custom audience App ID or upgrade an existing custom App ID to the new Microsoft-registered Azure VPN Client app values.
4+
description: Learn how to create or modify a custom audience App ID or upgrade an existing custom App ID to the new Microsoft-registered Azure VPN Client app values.
55
author: cherylmc
66
ms.service: azure-vpn-gateway
77
ms.topic: concept-article
88
ms.date: 08/05/2024
99
ms.author: cherylmc
1010
---
1111

12-
# Create a custom audience app ID for P2S VPN Microsoft Entra ID authentication
12+
# Create or modify a custom audience app ID for P2S VPN Microsoft Entra ID authentication
1313

1414
The steps in this article help you create a Microsoft Entra ID custom App ID (custom audience) for the new Microsoft-registered Azure VPN Client for point-to-site (P2S) connections. You can also update your existing tenant to [change the new Microsoft-registered Azure VPN Client app](#change) from the previous Azure VPN Client app.
1515

includes/vpn-gateway-entra-app-id-descriptions.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
author: cherylmc
33
ms.author: cherylmc
4-
ms.date: 05/24/2024
4+
ms.date: 08/06/2024
55
ms.service: azure-vpn-gateway
66
ms.custom: linux-related-content
77
ms.topic: include
@@ -10,7 +10,9 @@ VPN Gateway now supports a new Microsoft-registered App ID and corresponding Aud
1010

1111
Previously, you were required to manually register (integrate) the Azure VPN Client app with your Microsoft Entra tenant. Registering the client app creates an App ID representing the identity of the Azure VPN Client application and requires authorization using the Global Administrator role. To better understand the difference between the types of application objects, see [How and why applications are added to Microsoft Entra ID](/entra/identity-platform/how-applications-are-added).
1212

13-
When possible, we recommend that you configure new P2S gateways using the Microsoft-registered Azure VPN client App ID and its corresponding Audience values, instead of manually registering the Azure VPN Client app with your tenant. If you have a previously configured Azure VPN gateway that uses Microsoft Entra ID authentication, you can update the gateway and clients to take advantage of the new Microsoft-registered App ID. Updating the P2S gateway with the new Audience value is required if you want Linux clients to connect. The Azure VPN Client for Linux isn't backward compatible with the older Audience values. If you have an existing P2S gateway that you want to update to use a new Audience value, see [Change Audience for a P2S VPN gateway](../articles/vpn-gateway/point-to-site-entra-gateway-update.md).
13+
When possible, we recommend that you configure new P2S gateways using the Microsoft-registered Azure VPN client App ID and its corresponding Audience values, instead of manually registering the Azure VPN Client app with your tenant. If you have a previously configured Azure VPN gateway that uses Microsoft Entra ID authentication, you can update the gateway and clients to take advantage of the new Microsoft-registered App ID. Updating the P2S gateway with the new Audience value is required if you want Linux clients to connect. The Azure VPN Client for Linux isn't backward compatible with the older Audience values.
14+
15+
If you have an existing P2S gateway that you want to update to use a new Audience value, see [Change Audience for a P2S VPN gateway](../articles/vpn-gateway/point-to-site-entra-gateway-update.md). If you want to create or modify a custom Audience value, see [Create a custom audience app ID for P2S VPN Microsoft Entra ID authentication](../articles/vpn-gateway/point-to-site-entra-register-custom-app.md).
1416

1517
Considerations and limitations:
1618

0 commit comments

Comments
 (0)