I want to print a error message to anyconnect user. (CISCO ISE)

[kkt1195]

When anyconnect user attempts to connect to vpn with a disabled account, I want to print a error message saying 'This account has been disabled'.

If a program or service is missing during the Posture check, text can be displayed in requirements > Remediations actions, but the Identity status cannot be included in the Posture check.

Is there a way to output a error message when Status is Disabled?

[andrewswanson · Accepted solution]

Hi
If you are terminating AnyConnect VPN on an ASA, you can look at using the "Access Deny Message" on the ASA Group policy.
hth
Andy

Access Deny Message—To create a message to display to users for whom access is denied, enter it in this field.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa917/asdm717/vpn/asdm-717-vpn-config/vpn-asdm-setup.html