---
title: NetworkVPNAlwaysOnTunnelConfigurationElement_IKEV2_Authentication_ExtendedAuthObject
framework: Device Management
role: symbol
role_heading: Object
platforms: [iOS 27.0+, iPadOS 27.0+, Mac Catalyst 27.0+, visionOS 27.0+]
path: devicemanagement/networkvpnalwaysontunnelconfigurationelement_ikev2_authentication_extendedauthobject
---

# NetworkVPNAlwaysOnTunnelConfigurationElement_IKEV2_Authentication_ExtendedAuthObject

Specifies details about extended authentication (EAP).

## Declaration

```data
object NetworkVPNAlwaysOnTunnelConfigurationElement_IKEV2_Authentication_ExtendedAuthObject
```

## Properties

CredentialsAssetReference: The identifier of an asset declaration that contains the credentials (user name and password) to authenticate with the VPN server. Required when Enabled is set to true. Implies the use of EAP-MSCHAPv2. Enabled: If true, enables EAP-only authentication. ServerCertificateCommonName: The common name of the server certificate. The system uses this name to validate the certificate sent by the IKE server. If not set, the system uses the remote identifier to validate the certificate. ServerCertificateIssuerCommonName: Common Name of the server certificate issuer. If set, this field causes IKE to send a certificate request based on this certificate issuer to the server. This key is required if the IdentityCertificateType key is included and the ExtendedAuth.Enabled key is true. TLSMaximumVersion: The maximum TLS version to use with EAP-TLS authentication. TLSMinimumVersion: The minimum TLS version to use with EAP-TLS authentication.