don't ever connect automatically

Hi corbosman,

Using the Username/Password prompt isn’t recommended when asking the user for two-factor credentials. Instead OpenVPN’s two-factor prompt support (known as “challenge/response”) should be used. More information about this, including server setup guides and examples, can be found at the links below:
https://www.sparklabs.com/support/kb/article/yubikey-otp-two-factor-authentication-with-openvpn-and-viscosity/
https://www.sparklabs.com/forum/t/otp-box-in-login-prompt/696/1

In the meantime, I recommend clearing the existing saved Username/Password from your Keychain, which will force Viscosity to immediately prompt for the login details when connecting. The steps for doing this are the same as listed in the “Keychain Entry Corruption” section in the following article:
https://www.sparklabs.com/support/kb/article/problem-saving-details-into-the-keychain/

If you also want to prevent users from saving a Username and Password, please see:
https://www.sparklabs.com/forum/t/prevent-user-from-saving-credentials/1306/2

Cheers,
James