Linux P2S VPN to Azure _without_ certificate?

The Azure VPN client is only available for Windows and macOS.

What are my options to get connectivity fron a Linux desktop environment to an Azure VPN, using P2S, which is integrated with AD and MFA into a larger domain? This VPN only covers a few select routes and DNS.

Right now, I am running Microsoft Windows 11 as an operating system, the Azure VPN client, and on top of that VMware Workstation or WSL2 (both work just fine). Are there any workable alternatives to this approach?

Azure VPN supports OpenVPN clients so you can use that on a linux machine. For P2S as well.

Has anyone found a solution? I have the same problem in 2024.

Azure now has a Linux VPN client (Preview) that supports Entra ID: https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-vpn-client-linux

But be aware that you need to change the VGW config to use a new audience: https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-gateway#configure-vpn and it’ll make the current connections stop working. You’ll need to reimport the config.

It does not support Linux when configured with authentication via AD. Only client certificate authentication works for Linux.

… waiting for the remote party (VPN endpoint owner) to accept that I want to connect with a client in “Preview” state - which may take a while. Sigh. (After all it’s my problem if the client does not work, and support I will not get anyay.)

FWIW, I got as far as the multi-factor authentication on both Ubuntu and Arch Linux, so there is hope that one of these days …