MX AnyConnect Push - Timeout OTP

[KRobert]

We run an on-prem RADIUS MFA authentication system for our MFA push notification system when connecting to the Meraki AnyConnect VPN. When I connect to our AnyConnect VPN through the AnyConnect Client I typically get a push notification to my phone, accept the push and my system is authenticated and I have access. I did run into an issue though when my phone did not receive my push notification and I was forced to use the OTP that is a backup for most push notification services. Has anyone been able to change the AnyConnect like to accept a OTP when the push fails? Is there a time out setting I need to configure for this to work?   

[PhilipDAth · Accepted solution]

You can only achieve this using SAML (provided your SAML provider supports this).  Common SAML authenticators include Cisco Duo and Office 365.

https://documentation.meraki.com/MX/Client_VPN/AnyConnect_on_the_MX_Appliance/Authentication#SAML_Au... 

[KRobert]

Thanks @PhilipDAth