László Vaskó

Hm, the response structure is different then the one I am familiar with. My VPN responds with the structure like this: ```xml 11111111 XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX ``` The `session-token` is a long...

I see you have an `sso-token` element in the xml. You could try adjusting this line: https://github.com/vlaci/openconnect-sso/blob/54da0073732cc1cb445360c3d6f0c915ae223ec8/openconnect_sso/authenticator.py#L188 ```python session_token=xml["sso-token"], ``` If this would work, I'll update the code to handle...

Ohm, I have misread the logs: The `sso-token` was the one we have posted to the VPN endpoint, not the response to that. My next idea is that you need...

Do you invoke openconnect-sso from the terminal? Otherwise I have no idea what could be wrong.

By default [csd is not executed](https://www.infradead.org/openconnect/csd.html) by openconnect. You can enable execution of the csd script by e.g passing `-- --csd-user ` option. (arguments passed after `--` are passed directly...

I was slow to conenct the dots if the server denies authentication because of the missing csd info, anything we may pass to openconnect after authetnication completes won't help. I...

Sorry for not responding earlier, I haven't got much time lately but hopefully I can start look into it in a few weeks. If me or someone else could submit...

Unfortunately I no longer have access to an anyconnect VPN endpoint so I won't be able to help much implementing this feature :(

Please run openconnect-sso with `-l debug` argument and paste the contents of log line starting with `[debug ] Auth init response received`

Are you sure you are connecting on an AnyConnect compatible endpoint? Does anyconnect work on that endpoint? The reason I ask this is that openconnect-sso (and openconnect in anyconnect compatibility...