Support

openlawsvpn connects to AWS Client VPN endpoints that use SAML / SSO authentication. The app does not store passwords — sign-in always happens through your organisation's identity provider in the browser.

Need help? Email support@openlawsvpn.com and include the output from the Log tab if possible.

Requirements

An AWS Client VPN endpoint configured for SAML federated authentication.
A .ovpn profile file from your network administrator (or your organisation's VPN portal).
An account with your organisation's identity provider (Google Workspace, Okta, AWS IAM Identity Center, Microsoft Entra ID, or any SAML 2.0 provider).
An active openlawsvpn subscription (managed via App Store → Settings → Apple Account → Subscriptions).

Getting started

1. Subscribe

On first launch the app shows a subscription screen. Start a free trial or subscribe monthly to unlock the main interface. You can manage or cancel the subscription at any time in Settings → Apple Account → Subscriptions.

2. Add a profile

Save the .ovpn file your administrator provided to the Files app (or AirDrop it to your device). Open openlawsvpn, go to the Connect tab, tap + Add Profile, and select the file. The profile appears in the list.

3. Connect

Tap Connect on the profile. The row shows Waiting for SAML….
The first time, iOS asks permission to open your identity provider for sign-in — tap Continue.
Sign in on your identity provider's page. After sign-in, the browser may show "This form is not secure — Submit?" — tap Submit. This is the secure token being returned to the app over your device's private loopback address (127.0.0.1); nothing leaves your device.
The row shows ● Connected and iOS shows the VPN badge in the status bar.

4. Disconnect

Tap Disconnect on the connected profile. The VPN badge disappears.

Troubleshooting

Symptom	What to do
Sign-in page won't load	Check your internet connection and tap Disconnect, then Connect again.
Connect button does nothing	Make sure a profile is selected and your subscription is active (Settings → Apple Account → Subscriptions).
Stuck on Waiting for SAML…	The browser sign-in wasn't completed. Sign-in times out after 5 minutes. Tap Disconnect and try again.
Sign-in is rejected	Use your normal work credentials. If the problem persists, contact your VPN administrator — your account may need to be added to the IdP group that has access to the VPN endpoint.
Connected, but a site won't load	That resource may not be routed through this VPN profile. Check the split-tunnel configuration with your administrator.
Profile fails to import	Make sure the file has a `.ovpn` extension and was generated for AWS Client VPN with SAML authentication. Standard OpenVPN-only profiles are not supported.
Subscription not recognised after restoring purchases	Tap Restore Purchases on the subscription screen, or go to Settings → Apple Account → Subscriptions to confirm the subscription is active.

Billing & subscriptions

Subscriptions are managed entirely by Apple. openlawsvpn does not store payment information.

Cancel: Settings → Apple Account → Subscriptions → openlawsvpn → Cancel Subscription.
Refund requests: reportaproblem.apple.com or Apple billing support.

Privacy

The app collects no personal data, no analytics, and no telemetry. See our full Privacy Policy.

Contact

Email us at support@openlawsvpn.com. Please include:

App version (visible on the About tab).
iOS version.
A description of the problem.
The output from the Log tab if a connection attempt was made.