Need VPN to request VPN password everytime
Configuring 2FA for office. A couple users have Macs and they remote into the office. Right now, they connect using their AD username and password and they are connecting as expected. The move to 2FA is using an Authenticator and a random 6 digit code to replace the password. I need the VPN to request / require typing the password - so we can enter the OTP. I have tried removing the password and just leaving it blank, but it just disconnects. The only way I've been able to get it to work is to modify the VPN settings and add the OTP before trying to connect.
While this works, I anticipate angry users; as they won't want to perform this every time they want to connect (I don't blame them). Is there any way to get the VPN to request the VPN (not the keychain) password everytime its launched?