Still not available on the MX Anyconnect. I was looking for a way to modify the MFA prompt window, which looks identical to the regular prompt window, except it says "Login error." instead of "Login failed.". Unfortunately, this would require a transform file or something.   https://documentation.meraki.com/MX/Client_VPN/AnyConnect_on_the_MX_Appliance/AnyConnect_on_ASA_vs._MX   ... View more

SAML support is available, but you need to call Meraki support to have them enable it for the client VPN. That allows you to Auth straight to Duo, Okta, AzureAD, etc, without the RADIUS server.   https://documentation.meraki.com/MX/Client_VPN/AnyConnect_on_the_MX_Appliance/Authentication   I'm still not sure of what kind of policy control you'd be able to apply, though. ... View more