Accessing Azure VPN (vWan) from MacOs (11.6 Big Sur)

I am the only user on a Mac and my company IT people are at a lost to get me on the VWAN . They use Azure VPN and need me to use the 'Azure VPN Client' (from the app store).

The problem is that the Azure VPN Client won't even load the generic ovpn.xml file they sent me (which works on Windows, or so they say).

The error log says that the import failed with some reference fo Swift function calls:

10/18/2021 10:53:23: Error ImportProfile: Failed to import VPN connection profile from xml file:///Users/XXXXXXX/Downloads/ASP_Gateway%20(1)/Generic%5CVpnSettings.xml due to error: Failed to import the VPN connection profile due to error: Swift.DecodingError.keyNotFound(CodingKeys(stringValue: "name", intValue: nil), Swift.DecodingError.Context(codingPath: [], debugDescription: "TODO", underlyingError: nil)) 10/18/2021 10:53:23: Error Failed to import the VPN connection profile due to error: Swift.DecodingError.keyNotFound(CodingKeys(stringValue: "name", intValue: nil), Swift.DecodingError.Context(codingPath: [], debugDescription: "TODO", underlyingError: nil)) 10/18/2021 10:53:08: Information Application Initialized

I was able to provide all but one of the required parameters using the content of the XML file. The missing parameter is the serverSecret which is not in the configuration file. since the configuration file is said to work on Windows, is there a different way to configure the Azure VPN client that doesn't require it, or if there is a way to extract it from the embedded certificate? Even better would be to find a way to make the provided configuration work..

Here is the content of the configuration file:

<?xml version="1.0"?>
<VpnProfile xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
  <VpnServer>azuregateway-6d4e0066-da85-4179-9692-7ca7f3b97c84-353fe19011b4.vpn.azure.com</VpnServer>
  <VpnType>SSTP,IkeV2</VpnType>
  <CaCert>MI...d4=</CaCert>
  <Routes>172.28.0.0/16,172.30.0.0/16,172.26.0.0/16,172.23.23.0/24</Routes>
  <Auth>EAPTLS</Auth>
  <VnetName>ASP-vNET</VnetName>
  <VnetId>6d4e0066-da85-4179-9692-7ca7f3b97c84</VnetId>
  <ServerCertRootCn>DigiCert Global Root CA</ServerCertRootCn>
  <ServerCertIssuerCn>DigiCert Global Root CA</ServerCertIssuerCn>
  <VpnClientAddressPool>192.168.110.0/24</VpnClientAddressPool>
  <AadIssuer />
  <AadTenant />
  <AadAudience />
  <CustomDnsServers>172.26.161.23,172.26.161.4,172.26.161.5,172.24.106.11</CustomDnsServers>
</VpnProfile>

Note, I generated a self-signed certificate from the root certificate they gave me, and extracted the private and public key. to populate these two configuration fields but I don't think the program go to even look at these because the missing server secret caused an error first.