We successfully deployed using config profiles to deploy the VPN profile
and install the app via the app store and it has worked for us. No need
for one time admin access. There's a specific setting for mobile connect
under connection type in the VPN...
