I can't add the azure vpn client into my tenant.

Joel Rosado 5 Reputation points
2024-05-03T01:20:44.24+00:00

I attempt to add the Azure VPN client to my enterprise applications but when I get to Azure site. I click the "sign up for azure VPN client" and then get brought back to my azure dashboard, and nothing is added to my enterprise applications.

thanks

Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,795 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. hossein jalilian 11,055 Reputation points Volunteer Moderator
    2024-05-03T01:40:24.71+00:00

    Thanks for posting your question in the Microsoft Q&A forum.

    To resolve your issue, try the following steps:

    1. In the Azure portal, navigate to the Azure Active Directory service and then go to "Enterprise applications."
    2. Check if an application named "Azure VPN" already exists in the list. If it does, try assigning the required users/groups to this application.
    3. If the "Azure VPN" application is not listed, click on "New application" and then search for "Azure VPN" in the Azure AD gallery. Add this application to your tenant.

    Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful

    1 person found this answer helpful.

  2. GitaraniSharma-MSFT 50,096 Reputation points Microsoft Employee Moderator
    2024-05-06T15:39:46.3766667+00:00

    Hello @Joel Rosado ,

    I understand that you are attempting to add the Azure VPN client to your enterprise applications but when you click the "sign up for Azure VPN client", it brings you back to your Azure dashboard, and nothing is added to your enterprise applications.

    If you are trying to configure Azure P2S VPN gateway for Microsoft Entra ID authentication, then you need to follow the below documentation:

    https://learn.microsoft.com/en-us/azure/vpn-gateway/openvpn-azure-ad-tenant

    1. Sign in to the Azure portal as a user that is assigned the Global administrator role.
    2. Next, grant admin consent for your organization. This allows the Azure VPN application to sign in and read user profiles. Copy and paste the URL that pertains to your deployment location in the address bar of your browser: For Public: https://login.microsoftonline.com/common/oauth2/authorize?client_id=41b23e61-6c1e-4545-b367-cd054e0ed4b4&response_type=code&redirect_uri=https://portal.azure.com&nonce=1234&prompt=admin_consent
    3. Select the account that has the Global administrator role if prompted.
    4. On the Permissions requested page, select Accept.
    5. Go to Microsoft Entra ID. In the left pane, click Enterprise applications. You'll see Azure VPN listed.

    As per the above doc, you need to sign in to the Azure portal as a user that is assigned the Global administrator role. If you are using a global admin account that is not native to the Azure AD tenant to provide consent, please replace “common” with the Azure AD directory id in the URL (https://login.microsoftonline.com/common/oauth2/authorize?client_id=41b23e61-6c1e-4545-b367-cd054e0ed4b4&response_type=code&redirect_uri=https://portal.azure.com&nonce=1234&prompt=admin_consent). You may also have to replace “common” with your directory id in certain other cases as well.

    The Directory ID of the directory that you want to use for authentication is listed in the properties section of the Active Directory page.

    Please refer: https://learn.microsoft.com/en-us/azure/vpn-gateway/openvpn-azure-ad-tenant#enable-authentication

    NOTE:

    • Native member to Azure AD tenant is a member user or Azure AD member whose account is created via Azure AD > Users > Create user option in the tenant.
    • A user not native to the Azure AD tenant means a user who is brought over from another directory as a business-to-business (B2B) collaboration guest (guest user).

    Kindly let us know if the above helps or you need further assistance on this issue.


    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    1 person found this answer helpful.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.