Forum Discussion
cmiarshvac
Jan 19, 2026Brass Contributor
How Do I Target the Azure VPN Client in a Conditional Access Policy?
I am using the Azure VPN Client to connect users to an Azure VPN Gateway using their Entra ID credentials to authenticate. I want to target this application with a CA policy that requires MFA every ...
mmarchand
May 03, 2026Copper Contributor
I found out how to make the Microsoft-Registered Azure VPN (AppID:c632b3df-fb67-4d84-bdcf-b95ad541b5c8) appear in the list of enterprise apps. For some reason, Microsoft decided not to display this by default.
You can make it appear by adding the Service Principal manually with Graph Powershell:
Connect-MgGraph -Scopes "Application.ReadWrite.All"
New-MgServicePrincipal -AppId "c632b3df-fb67-4d84-bdcf-b95ad541b5c8"
This way, you can now target it with CA policies without changing any of your existing audience values... anywhere.