AWS Client VPN endpoint connection from mobile phone

Good Day, I am getting "Authentication Failed" error when attempting to connect to AWS Client VPN endpoint from a mobile device. Based on https://docs.aws.amazon.com/vpn/latest/clientvpn-user/android.html "OpenVPN" client was installed on iphone device and configured with the same configuration profile that works perfectly fine on Desktop with "AWS VPN Client" app. The authentication is configured as federated going against MS Azure AD (SAML), No Client Certificate is being used. In OpenVPN client logs we are getting "AUTH_FAILED Invalid username or password". Is there anything that can be done about this? Thank you, Sergey

주제

프론트엔드 웹 및 모바일 네트워킹 및 콘텐츠 전송

태그

프론트엔드 웹 및 모바일 AWS 클라이언트 VPN

언어

English

Sergey

질문됨 일 년 전856회 조회

1개 답변

최신
최다 투표
가장 많은 댓글

이 답변이 도움이 되었나요?커뮤니티가 여러분의 지식을 활용할 수 있도록 정답을 찬성하세요.

수락된 답변

AWS Client VPN with SAML based federated access ONLY supports the official AWS Client VPN Software.

You can not use 3rd party VPN Software (open vpn client) if you are using federated access. To use 3rd Party VPN Software, you have to use certificate based authentication.

It is also confirmed here https://docs.aws.amazon.com/vpn/latest/clientvpn-user/linux.html

전문가

Gary Mclean

답변함 일 년 전

전문가

Tushar_J

검토됨 일 년 전

전문가

Sedat Salman

검토됨 일 년 전

Sergey
일 년 전
I guess I can still use a variation of AWS AD, potentially AWS AD Connector. In our case certificate based authentication is not an option. But I've got the point about the "federated access" part. Thanks
Gary Mclean 전문가
일 년 전
Yeah you may have to create an AWS managed AD and then create a trust with your azure ad and use AD auth. 100% I agree, I wouldn’t use certificates. I have in the past but it’s far easier with SAML with azure that I’ve setup in the past. Good luck hope you get to a working solution.

AWS Client VPN endpoint connection from mobile phone

관련 콘텐츠