@franco01
Im doing the same, the problem seems to be that the PAP does support OTP codes from the mobile app and an HW token, but the built-in L2TP/Ipsec client in the windows 10 does not support additional input, so the only one that would work, is call-up or notification on the app, and that needs internet access on the phone for the notification to work, which make a mess sometimes, and a call is not practical, like when you using Wi-Fi on an airplane where the phone has no coverage and the Wi-Fi is only allowing single MAC address.
It seems to be quite unstable also, I done a test setup and the MFA worked twice of like 6 tries yesterday.
/Frederic
