VPN tunnel prompts for credentials
The VPN prelogon with machine certificate configuration does not rely on username and password to connect. On the Remote Access profile assigned to the endpoint policy, edit the tunnel settings. In Basic Settings, ensure that Prompt for Username is disabled.