AWS Client VPN does not work with other clients except AWS's client

Question

Hello! I've recently setup a Client VPN. Authentication is done using AWS SSO (IAM Identity Center).

I have downloaded the ovpn file and installed the AWS client. All works perfectly! I have tried loading the ovpn into other clients, such as OpenVPN or TunnelBlick, but both fail to work. Is it because of the federated authentication? If yes, can it be fixed?

Tushar Jagdale · Accepted Answer

You are right, the note is mentioned in the documentation:

https://docs.aws.amazon.com/vpn/latest/clientvpn-user/connect.html

Note:

For SAML-based federated authentication, you must use the AWS provided client to connect to a Client VPN endpoint. For more information, see Connect using an AWS provided client or contact your VPN administrator.

Lucas Arcanjo · Answer

Standard OpenVPN clients do not support AWS's auth-federate flow.

For macOS, I built `awsvpn` as a terminal interface around AWS's signed VPN engine:

https://github.com/lucassarcanjo/aws-vpn-cli

It still requires the official AWS VPN Client to be installed, so it is not a generic OpenVPN replacement.

rePost-User-3846711 · Answer

thanks! i missed that note somehow.

AWS Client VPN does not work with other clients except AWS's client

Add your answer

Relevant content