Change the default multi-factor authentication to the Microsoft Authenticator App.  This is required if you want access to the VPN.