OpenLawsVPN Client
AWS Client VPN - SAML / SSO
About
Securely connect to your organization's network using your existing single sign-on credentials. This client supports various identity providers and automatically establishes an encrypted tunnel without storing passwords.
What's New in OpenLawsVPN Client
1.0.17
October 23, 2026
Clear recovery after connection loss: if the VPN drops because of a network change or outage, the app now shows "Connection interrupted — sign in again" and starts a fresh SSO sign-in when you tap Connect. A manual Disconnect still returns cleanly to idle. More stable connections on weak or changing networks: brief Wi-Fi or mobile data outages no longer end the VPN session immediately. More reliable re-authentication: expired or rejected SAML sign-ins are cleared right away, so reconnecting never reuses old credentials or opens several sign-in pages at once. Better compatibility with AWS Client VPN endpoints: support for AES-192-GCM, improved rekeying, keepalive/ping settings from your .ovpn profile, and AWS's default packet size. Routes and DNS set by the VPN are monitored and restored if they go missing, without touching settings you changed yourself. Subscription screen now shows the free trial length correctly. About screen now includes a notice that openlawsvpn is independent and not affiliated with Amazon Web Services.
MoreSubscriptions & In-App Purchases
OpenLawsVPN Pro Monthly
SSO login for AWS Client VPN on iPhone
FAQ
What is OpenLawsVPN Client?
OpenLawsVPN Client is a secure, independent application for AWS Client VPN endpoints that use SAML/SSO for authentication. It allows you to connect to your organization's network using your existing single sign-on credentials.
How does OpenLawsVPN Client handle authentication?
Authentication is performed through your identity provider via your web browser, reusing existing SSO sessions where possible. No passwords are ever stored within the app, and it supports multi-factor authentication.
What identity providers are supported by OpenLawsVPN Client?
The client supports popular identity providers such as Google Workspace, Okta, AWS IAM Identity Center, and Microsoft Entra ID, along with other SAML identity providers.
Can I manage multiple VPN connections with OpenLawsVPN Client?
Yes, you can import standard .ovpn client configuration files from your administrator and manage multiple VPN profiles within the app. Connecting to a profile can be done with a single tap.
Is OpenLawsVPN Client free to use?
Full access to OpenLawsVPN Client requires an auto-renewing subscription. A free trial is offered, after which it renews monthly until canceled. You can manage or cancel your subscription in your Apple Account settings.
What are the privacy features of OpenLawsVPN Client?
The app does not store usernames or passwords. It briefly listens only on your device's private loopback address (127.0.0.1) during sign-in to receive a secure token. There is no analytics, tracking, or user data collection.
What are the requirements to use OpenLawsVPN Client?
You need an AWS Client VPN endpoint configured for SAML federated authentication, a .ovpn profile from your administrator, and an account with your organization's identity provider.
How often is OpenLawsVPN Client updated?
The latest version is 1.0.17, and it was last updated on October 23, 2026. This indicates a recent update, suggesting active development and maintenance.
