Pushing IKEv2 VPN configurations via Intune to Android

[danchevv]

Hi,

We are looking to see if it is possible to push IKEv2 VPN configurations via Intune to the Strongswan app on Android. Ideally, we want to provide a certificate via Intune to the device, then use the same certificate in the VPN configuration and provide it via Intune. Looking at the following documentation by Microsoft:
https://docs.microsoft.com/en-us/mem/intune/apps/app-configuration-vpn-ae#before-you-begin

I see that Strongswan is not listed in the supported VPN clients and there is no option to deploy a configuration with a JSON file or via the configuration designer. Are there any plans to provide this functionality, or is there another way to deploy a Strongswan VPN configuration to an Android device via Intune?

Regards,
Vlatko

[tobiasbrunner]

The app currently doesn't support any managed configurations. It does support its own file format for importable VPN profiles (see here). No idea if it's possible to use Intune to pass such profiles to clients somehow (there was #941, which seemed related to Intune, but I don't know what that user tried to do exactly).

[danchevv]

Ah, that settles it for me then. We were aware of the file import option, but were wondering if it is possible to configure it via Intune. Thanks for the information!

[maluueu]

@tobiasbrunner now that managed configuration is possible, how can we use it to import settings via Intune? Is there any reference guide?

[tobiasbrunner]

I don't know anything about Intune in particular or how it works. As I understand it, the EMM software (i.e. Intune) can query the XML data provided by the app that defines all the configurable settings and then provide an interface to manage the settings for users or groups of users etc.