Change to using SAML authentication directly against AzureAD - which uses SSO.  This then uses whatever you have configured in Azure AD.  Ideally, you'll want a subscription that gives you conditional access control in Azure to get fine grained control. https://documentation.meraki.com/MX/AnyConnect_on_the_MX_Appliance/AnyConnect_Azure_AD_SAML_Configuration  ... View more