The authentication mechanism that enables iPhone and iPad to take advantage of VPN-on-demand is called "Per-App VPN" or "VPN-on-demand with Per-App VPN."
With Per-App VPN, the device establishes a VPN connection automatically when specific apps or resources are accessed that require secure communication. This mechanism allows organizations to enforce VPN policies selectively for certain apps or resources, ensuring that sensitive data is transmitted securely over the VPN tunnel.
Authentication for Per-App VPN typically involves the use of certificates or credentials configured by the organization's IT department. These credentials are used to authenticate the device and establish a secure VPN connection when needed.
Apple's iOS devices, including iPhones and iPads, support Per-App VPN functionality, enabling organizations to implement secure VPN connections for specific apps or resources as required.