Anyconnect with multiple connection profiles and okta radius

[engineer467]

Hello

I have AnyConnect VPN configured with multiple connection profiles on FTDv (AWS) and authentication is achieved using Okta radius.

Now problem is any user account can authenticate/connect to any of the connection profiles. How can I keep the authentication separate for the users so that someone who is not supposed/eligible to connect to a profile should not be able to connect to that profile.

thank you in advance.

[MHM Cisco World]

MHM

[engineer467]

This won't work in FTDv..

[MHM Cisco World]

MHM

[engineer467]

Sorry I did not understand what you mean by one tunnel group and three group-policy?

[MHM Cisco World]

https://www.cisco.com/c/en/us/support/docs/security/secure-client-5/221173-configure-dynamic-group-policy-assignmen.html

check this 

MHM

[engineer467]

Thank you, but I am using Okta radius, not SAML..