This is because of the requirement for SSO Extensions that are required for this to work on a Macintosh. I believe Cisco should allow chrome or firefox to be used for the authentication.  BTW, this SSO Extension is delivered via a Macintosh Profile that MUST be delivered by an MDM.  It is a big pain because not everyone uses a MDM for their Macintosh.   We pushed this SSO Extension via a MDM, and things work.  Cisco, please update your VPN to use anything other then the macos.ascocket extension or allow companies to be able to leverage a different browser for the WebAuthn authentication. com.cisco.anyconnect.macos.acsockext.systemextension/Contents/MacOS/com.cisco.anyconnect.macos.acsockext ... View more