In ROS7.1rc3
openvpn client forced to use username or password
but in openvpn username or password is not necessary and u can authenticate using your certificate
Yes, Mikrotik requires a somewhat non standard configuration.
However it mostly works.
If wireguard is an option, it seems very close to standard.
(And faster encryption)