Can two AnyConnect connection profiles use the same SAML IdP?

[lina.cao]

I would like have my two connection profiles "DefaultWEBVPNGroup" and "Azure_MFA" use SAML authentication. And I have already configured both certificates in the ASA. But I just realized in the SAML idp, I only can configure one "trustpoint idp" to  unique tunnel group profile...

My question is how to make both Anyconnect profiles use SAML authentication at the same time? Thanks!

Webvpn
Saml idp https://sts.windows.net/******/
 url sign-in https://login.microsoftonline.com/****/
 url sign-out https://login.microsoftonline.com/***/
 trustpoint idp <tunnel-group name>
 trustpoint sp ASDM_TrustPoint1
 no force re-authenticate
 no signature
 base-url https://.....

[Salman Mahajan]

Yes you can use identical IDP on FTD however It is not possible to configure multiple Tunnel-groups with same instance of the Cisco AnyConnect application on Azure . As per the Microsoft , if you would like to on board multiple TG  of the server then you need to add multiple instances of the Cisco AnyConnect application . Please refer to the below link

https://learn.microsoft.com/en-us/azure/active-directory/saas-apps/cisco-anyconnect