VPN with MFA push?

Question

Has anyone found a way to have XG VPN logins using MFA (OTP) send a "push approval" to a mobile device versus requring each user to login to the XG, scan the QR code, then manually append their password with that code? That process is fairly cumbersome for most users and requires a lot of hand-holding from IT.

This thread was automatically locked due to age.

LuCar Toni · Accepted Answer

Those Push Approvals are most likely resolved by a Radius Solutions. 
 And Radius with Push is not supported currently by XG. We are lacking the Radius Timeout. 
 XG waits for 3(+3 Sec) until the Radius authentication timeout hits and kills this attempt. 
 So you would have 6 seconds to accept the push. 
 As far as i know, this feature (Radius Timeout) will be included in the next major release. 
 https://community.sophos.com/products/xg-firewall/f/authentication/74746/ssl-vpn-radius-with-2factor-timout/396719#396719