We are in a testing phase with FTD. Currently, we use DAPs with ASA to control which users get certain Access lists when connecting with AnyConnect, and works well and is clean. I know that is not a feature in FTD yet (or maybe ever) but I was curi...