Hello all, iam not able to add the application "Azure VPN Client" in Enterprise Application Entra ID. When i click the button "Sign Up for Azure VPN Client", i got a redirect to the homescreen of Azure. I also tried to add the App in Azure AD itself, but it is the same result. I have global Admin priveleges. I tried to close my session and reconnect. The App is not listed under enterprise applications. Hope someone can help me. Thank you very much. Greetings Daniel

Hi @Daniel Böhm Thank you for posting this in Microsoft Q&A. I understand that you are trying to add the Azure VPN Client Enterprise Application to the tenant, but when you click the 'Sign Up for Azure VPN Client' button, it gets redirected to the home screen of Azure and the application is not added to your tenant. Can you try adding the Azure VPN Client enterprise application like below 1.Sign in to the Microsoft admin center as a user that is assigned the Global administrator role. 2.Next, grant admin consent for your organization. This allows the Azure VPN application to sign in and read user profiles. Copy and paste the URL that pertains to your deployment location in the address bar of your browser: https://login.microsoftonline.com/common/oauth2/authorize?client_id=41b23e61-6c1e-4545-b367-cd054e0ed4b4&response_type=code&redirect_uri=https://portal.azure.com&nonce=1234&prompt=admin_consent 3.Select the account that has the Global administrator role if prompted. 4.On the Permissions requested page, select Accept. 5.Go to Microsoft Entra ID. In the left pane, click Enterprise applications. You'll see Azure VPN listed. Hope this helps. Do let us know if you any further queries. Thanks, Navya. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Hello @ Daniel Böhm Refer to similar question asked in Q and A forum for your solution . If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.

Can´t add Azure VPN Client Enterprise Application to Tenant

Accepted answer

Navya 14,040 Reputation points Microsoft Vendor

2024-10-07T10:17:32.6333333+00:00
Hi @Daniel Böhm

Thank you for posting this in Microsoft Q&A.

I understand that you are trying to add the Azure VPN Client Enterprise Application to the tenant, but when you click the 'Sign Up for Azure VPN Client' button, it gets redirected to the home screen of Azure and the application is not added to your tenant.

Can you try adding the Azure VPN Client enterprise application like below

1.Sign in to the Microsoft admin center as a user that is assigned the Global administrator role.

2.Next, grant admin consent for your organization. This allows the Azure VPN application to sign in and read user profiles. Copy and paste the URL that pertains to your deployment location in the address bar of your browser:

https://login.microsoftonline.com/common/oauth2/authorize?client_id=41b23e61-6c1e-4545-b367-cd054e0ed4b4&response_type=code&redirect_uri=https://portal.azure.com&nonce=1234&prompt=admin_consent

3.Select the account that has the Global administrator role if prompted.

4.On the Permissions requested page, select Accept.

5.Go to Microsoft Entra ID. In the left pane, click Enterprise applications. You'll see Azure VPN listed.

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Please sign in to rate this answer.

1 person found this answer helpful.
Daniel Böhm 20 Reputation points

2024-10-07T15:11:41.1766667+00:00

Hi @Navya

first of all thank you for your help. The application is now listed in the "Enterprise Applications".

The problem now is, when the client start to connect to our network we get the following error:

""Error 3399614468 Invalid resource. The client has requested access to a resource which is not listed in the requested permissions in the client's application registration."

So i tried to register the application in entra admin. The problem is now, that the application ID does not match with the application ID in the enterprise application.When I guess it correct, the application ID is made with the URL that you send us. I tried to change the URL to the application ID that is shown in Entra Admin App registration, but then i got this error:"AADSTS650052: The app is trying to access a service '###-6c1e-4545-b367-###'(Azure VPN) that your organization '###-0dcd-49e3-8a3c-###' lacks a service principal for. Contact your IT Admin to review the configuration of your service subscriptions or consent to the application in order to create the required service principal."Is it possible to change the application ID from ###-6c1e-4545-b367-### to ###-c7c2-4f8b-9d77-### or do we have another issue here?

Thank you very much.

Daniel Böhm 20 Reputation points

2024-10-11T06:25:23.82+00:00

Hi @Navya

first of all thank you for your help. The application is now listed in the "Enterprise Applications".

The problem now is, when the client start to connect to our network we get the following error:

""Error 3399614468 Invalid resource. The client has requested access to a resource which is not listed in the requested permissions in the client's application registration."

So i tried to register the application in entra admin. The problem is now, that the application ID does not match with the application ID in the enterprise application.When I guess it correct, the application ID is made with the URL that you send us. I tried to change the URL to the application ID that is shown in Entra Admin App registration, but then i got this error:"AADSTS650052: The app is trying to access a service '###-6c1e-4545-b367-###'(Azure VPN) that your organization '###-0dcd-49e3-8a3c-###' lacks a service principal for. Contact your IT Admin to review the configuration of your service subscriptions or consent to the application in order to create the required service principal."Is it possible to change the application ID from ###-6c1e-4545-b367-### to ###-c7c2-4f8b-9d77-### or do we have another issue here?

Thank you very much.

Navya 14,040 Reputation points Microsoft Vendor

2024-10-15T14:15:27.8066667+00:00

Hi @Daniel Böhm

Thank you for following up on this!

The client application has requested access to a resource, but this request has failed because the client has not specified the resource. This issue typically occurs when the company's app is not registered with Microsoft Entra ID or does not have the correct permissions applied.

Could you please cross-check the following in your Point-to-Site configuration Tenant, Audience and Issuer

For your reference: https://zcusa.951200.xyz/en-us/azure/vpn-gateway/openvpn-azure-ad-tenant

Is it possible to change the application ID

It's not possible to change the Application ID. The Application ID is an immutable ID that is generated once you register an application in Entra.

Navya 14,040 Reputation points Microsoft Vendor

2024-10-17T03:05:40.2266667+00:00

Hi @Daniel Böhm

Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.

Navya 14,040 Reputation points Microsoft Vendor

2024-10-25T11:36:18.2033333+00:00

Hi @Daniel Böhm

Thank you for joining the call in offline.

After joining the call, we noticed audience value mismatched. issue got resolved After provided valid audience in point-to-site configuration.

Thanks,

Navya.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Can´t add Azure VPN Client Enterprise Application to Tenant

1 additional answer

Your answer