Good morning,
We recently had this issue whereby AnyConnect was set to authenticate via 365 SAML in a hybrid environment. All machines had no issue with the rollout and testing, apart from one Windows tablet, which presented this after clicking on "Connect":
And the logs reporting "user credentials prompt cancelled".
To clear this, simply navigate to "Preferences" and uncheck "Block connections to untrusted servers" then retry. You should get the stock MS auth prompt:
Cheers
Regards,
DavidLaz