Support
openlawsvpn connects to AWS Client VPN endpoints that use SAML / SSO authentication. The app does not store passwords — sign-in always happens through your organisation's identity provider in the browser. Download the iPhone and iPad app or the Android app.
Need help? Email support@openlawsvpn.com and include the output from the Log tab if possible.
Requirements
- An AWS Client VPN endpoint configured for SAML federated authentication.
- A
.ovpnprofile file from your network administrator (or your organisation's VPN portal). - An account with your organisation's identity provider (Google Workspace, Okta, AWS IAM Identity Center, Microsoft Entra ID, or any SAML 2.0 provider).
- An active openlawsvpn subscription where required by your platform (managed through the store where you purchased it).
Getting started
1. Get the app
Download openlawsvpn from the App Store for iPhone and iPad or Google Play for Android. Any subscription, trial, or payment is managed by the store on the device.
2. Add a profile
Save the .ovpn file your administrator provided to your device. Open openlawsvpn, go to the Connect tab, tap + Add Profile on iPhone or iPad, or Import .ovpn File on Android, then select the file. The profile appears in the list.
3. Connect
- Tap Connect on the profile. The row shows Waiting for SAML….
- The first time, the operating system asks permission to create a VPN connection; approve it. On iPhone and iPad, also allow the app to open your identity provider for sign-in.
- Sign in on your identity provider's page. After sign-in, the browser may show "This form is not secure — Submit?" — tap Submit. This is the secure token being returned to the app over your device's private loopback address (
127.0.0.1); nothing leaves your device. - The row shows ● Connected and the operating system displays an active VPN indicator.
4. Disconnect
Tap Disconnect on the connected profile. The VPN badge disappears.
Troubleshooting
| Symptom | What to do |
|---|---|
| Sign-in page won't load | Check your internet connection and tap Disconnect, then Connect again. |
| Connect button does nothing | Make sure a profile is selected and your subscription is active (Settings → Apple Account → Subscriptions). |
| Stuck on Waiting for SAML… | The browser sign-in wasn't completed. Sign-in times out after 5 minutes. Tap Disconnect and try again. |
| Sign-in is rejected | Use your normal work credentials. If the problem persists, contact your VPN administrator — your account may need to be added to the IdP group that has access to the VPN endpoint. |
| Connected, but a site won't load | That resource may not be routed through this VPN profile. Check the split-tunnel configuration with your administrator. |
| Profile fails to import | Make sure the file has a .ovpn extension and was generated for AWS Client VPN with SAML authentication. Standard OpenVPN-only profiles are not supported. |
| Subscription not recognised after restoring purchases | Tap Restore Purchases on the subscription screen, or go to Settings → Apple Account → Subscriptions to confirm the subscription is active. |
Billing & subscriptions
Subscriptions are managed entirely by Apple. openlawsvpn does not store payment information.
- Cancel: Settings → Apple Account → Subscriptions → openlawsvpn → Cancel Subscription.
- Refund requests: reportaproblem.apple.com or Apple billing support.
Privacy
The app collects no personal data, no analytics, and no telemetry. See our full Privacy Policy.
Contact
Email us at support@openlawsvpn.com. Please include:
- App version (visible on the About tab).
- Device model, operating-system version, and whether you are using iPhone/iPad or Android.
- A description of the problem.
- The output from the Log tab if a connection attempt was made.