Getting AnyConnect to work on demand on the iPhone

[MikeM-2468]

I've got certificate based authentication working on the iPhone with AnyConnect and my ASA.  Now I need to get the on demand function to work.  AnyConnect is configured to use certificates, the certificate is selected and connect on demand is turned on. I have my internal domain added to always connect.  As a test I'm trying to access one of the web servers in the domain via Safari on the iPhone.  It appears to recognize that the VPN is needed, but I get the message "The VPN connection requires an application to start up."  My only option is to tap OK and then I get the Safari can't open page message.  Using a ping tool, it never tries to initiate the VPN.

[Acruzgreg]

thank you for you help,

I used group-url and this work...

[Wissam Bteich]

Guys,

I would greatly appreciate if someone can post the necessary configuration on the Cisco ASA in order to make this work because I am experiencing similar problems as Acruzgreg and group-url did not solve it yet.