OpenLawsVPN Client

openlawsvpn is a secure client for AWS Client VPN endpoints that authenticate with SAML / SSO. Connect to your organization's network using the same single sign-on you already use for work — Google Workspace, Okta, AWS IAM Identity Center, Microsoft Entra ID, and other SAML identity providers.

No passwords are ever stored in the app. When you connect, sign-in opens with your identity provider, reuses your existing SSO session where possible, and supports multi-factor authentication. Once you've signed in, the encrypted tunnel is established automatically.

FEATURES
• SAML / SSO sign-in through your own identity provider — nothing to remember, nothing stored
• Import standard .ovpn client configuration files from your administrator
• Manage multiple VPN profiles and connect with a single tap
• Live connection log for quick diagnostics
• Profiles stored encrypted on device
• Built on the open-source go-openlawsvpn engine

PRIVACY
• The app stores no username or password — authentication happens entirely through your identity provider in the browser.
• During sign-in the app briefly listens only on your device's private loopback address (127.0.0.1) to receive the secure token. It never accepts connections from the network and does not scan other devices.
• No analytics, no tracking, no user data collection.

REQUIREMENTS
openlawsvpn connects to AWS Client VPN endpoints configured for SAML federated authentication. You need a .ovpn profile from your administrator (or your company's VPN portal) and an account with your organization's identity provider.

SUBSCRIPTION
Full access requires an auto-renewing subscription. A free trial is offered; after the trial it renews monthly until canceled. Manage or cancel anytime in Settings › Apple Account › Subscriptions.

Terms of Use: https://openlawsvpn.com/terms.html
Privacy Policy URL: https://openlawsvpn.com/privacy.html