Remote deployment of OpenVPN client possible?

[glyphmon]

This is either so trivially obvious that no one creates documentation for it or strangely obscure, but... in the Cisco ASA that we just replace with a new Netgate box, a person could, from outside our network, connect via web browser to the external address of the ASA, get a login page, authenticate as they typically would for VPN access, and be able to download the AnyConnect client directly. Whether or not they could install for lack of administrative credentials aside, they could at least do the download.

Is this something that's possible in pfSense or is that just a no-go? The clients are available in the Client Export section of the OpenVPN settings, but it requires a login to the firewall, to download the appropriate clients depending on the environments we need to support, and then share them in some other fashion to the systems that need to get VPN access. Either that, or login to the firewall locally on every machine that we need to install on, which seems... unnecessary?

Thanks in advance for your suggestions.