Also, there are lots of third party plugins that work nicely with OpenVPN. I use OneLogin with OpenVPN via RADIUS for example.