You are configuring your Azure virtual network gateway to authenticate with Azure AD. What protocol and what VPN client do you need?