Configure Azure VPN Client - Microsoft Entra ID authentication - macOS

This article helps you configure your macOS client computer to connect to an Azure virtual network using a Virtual WAN User VPN point-to-site (P2S) connection. These steps apply to Azure VPN gateways configured for Microsoft Entra ID authentication. Microsoft Entra ID authentication only supports OpenVPNĀ® protocol connections and requires the Azure VPN Client. The Azure VPN client for macOS is currently not available in France and China due to local regulations and requirements.

Before you begin

Verify that you are on the correct article. The following table shows the configuration articles available for Azure Virtual WAN point-to-site (P2S) VPN clients. Steps differ, depending on the authentication type, tunnel type, and the client OS.

Authentication method Tunnel type Client OS VPN client
Certificate IKEv2, SSTP Windows Native VPN client
IKEv2 macOS Native VPN client
OpenVPN macOS OpenVPN client
OpenVPN iOS OpenVPN client
Microsoft Entra ID OpenVPN Windows Azure VPN client
OpenVPN macOS Azure VPN client

Prerequisites

This article assumes that you've already performed the following prerequisites:

Optional client configuration settings

You can configure the Azure VPN Client with optional configuration settings such as additional DNS servers, custom DNS, forced tunneling, custom routes, and other additional settings.

Next steps

For more information about Microsoft-registered Azure VPN Client, see Configure P2S User VPN for Microsoft Entra ID authentication.