使用 AWS re:Post 即表示您同意 AWS re:Post 使用條款
AWS re:Postre:Post

AWS Client VPN endpoint connection from mobile phone

0

Good Day, I am getting "Authentication Failed" error when attempting to connect to AWS Client VPN endpoint from a mobile device. Based on https://docs.aws.amazon.com/vpn/latest/clientvpn-user/android.html "OpenVPN" client was installed on iphone device and configured with the same configuration profile that works perfectly fine on Desktop with "AWS VPN Client" app. The authentication is configured as federated going against MS Azure AD (SAML), No Client Certificate is being used. In OpenVPN client logs we are getting "AUTH_FAILED Invalid username or password". Is there anything that can be done about this? Thank you, Sergey

主題
前端網頁與行動裝置網路與內容交付
標籤
前端網頁與行動裝置AWS Client VPN
語言
English
Sergey
已提問 1 年前檢視次數 858 次
1 個回答
0
已接受的答案

AWS Client VPN with SAML based federated access ONLY supports the official AWS Client VPN Software.

You can not use 3rd party VPN Software (open vpn client) if you are using federated access. To use 3rd Party VPN Software, you have to use certificate based authentication.

It is also confirmed here https://docs.aws.amazon.com/vpn/latest/clientvpn-user/linux.html

profile picture
專家
Gary Mclean
已回答 1 年前
profile pictureAWS
專家
Tushar_J
已審閱 1 年前
profile picture
專家
Sedat Salman
已審閱 1 年前
  • Sergey
    1 年前

    I guess I can still use a variation of AWS AD, potentially AWS AD Connector. In our case certificate based authentication is not an option. But I've got the point about the "federated access" part. Thanks

  • Gary Mclean 專家
    1 年前

    Yeah you may have to create an AWS managed AD and then create a trust with your azure ad and use AD auth. 100% I agree, I wouldn’t use certificates. I have in the past but it’s far easier with SAML with azure that I’ve setup in the past. Good luck hope you get to a working solution.

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋，同時有助於提問者的專業成長。

回答問題指南

相關內容