We are in need of this as well, we started deploying replacement hardware to users without a profile, then they use the SBL feature to establish the connection and allow them to login and establish the profile so we would not need to know their password. We changed AnyConnect to use SAML so we could support MFA for VPN to enhance our security posture and now we have run into this limitation. Please help us and others with this enhancement Cisco!
