Package: openconnect-sso
openconnect-ssoWrapper script for OpenConnect supporting Azure AD (SAMLv2) authentication
to Cisco SSL-VPNsInstallationUsing pip/pipxA generic way that works on most 'standard' Linux distributions out of the box.
The following example shows how to installopenconect-ssoalong with its
dependencies including Qt:$pipinstall--userpipx
Successfullyinstalledpipx
$pipxinstall"openconnect-sso[full]"⣾installingopenconnect-ssoinstalledpackageopenconnect-sso0.4.0,Python3.7.5Theseappsarenowgloballyavailable-openconnect-sso
⚠️Note:'/home/vlaci/.local/bin'isnotonyourPATHenvironmentvariable.
TheseappswillnotbegloballyaccessibleuntilyourPATHisupdated.Run`pipxensurepath`toautomaticallyaddit,ormanuallymodifyyourPATHinyour
shell's config file (i.e. ~/.bashrc).done! ✨ 🌟 ✨Successfully installed openconnect-sso$ pipx ensurepathSuccess! Added /home/vlaci/.local/bin to the PATH environment variable.Consider adding shell completions for pipx. Run 'pipxcompletions'forinstructions.

Youlikelyneedtoopenanewterminalorre-loginforthechangestotake
effect.✨🌟✨Of course you can also install viapipinstead ofpipxif you'd like to
install system-wide or a virtualenv of your choice.On Arch LinuxThere is an unofficial package available for Arch Linux onAUR. You can use your
favorite AUR helper to install it:yay-Sopenconnect-ssoUsing nixThe easiest method to try is by installing directly:$nix-env-i-fhttps://github.com/vlaci/openconnect-sso/archive/master.tar.gz
unpacking'https://github.com/vlaci/openconnect-sso/archive/master.tar.gz'...[...]installing'openconnect-sso-0.4.0'thesederivationswillbebuilt:/nix/store/2z47740z1rr2cfqfin5lnq04sq3c5xjg-openconnect-sso-0.4.0.drv[...]building'/nix/store/50q496iqf840wi8b95cfmgn07k6y5b59-user-environment.drv'...
created606symlinksinuserenvironment
$openconnect-ssoAn overlay is also available to use in nix expressions:letopenconnectOverlay =import"${builtins.fetchTarballhttps://github.com/vlaci/openconnect-sso/archive/master.tar.gz}/overlay.nix";pkgs =import<nixpkgs>{overlays =[openconnectOverlay];};in#  pkgs.openconnect-sso is available in this context... or to use inconfiguration.nix:{config,...}:{nixpkgs.overlays =[(import"${builtins.fetchTarballhttps://github.com/vlaci/openconnect-sso/archive/master.tar.gz}/overlay.nix")];}Windows(EXPERIMENTAL)Install withpip/pipxand be sure that you havesudoandopenconnectexecutable commands in your PATH.UsageIf you want to save credentials and get them automatically
injected in the web browser:$openconnect-sso--servervpn.server.com/group--useruser@domain.com
Password(user@domain.com):[info]AuthenticatingtoVPNendpoint...User credentials are automatically saved to the users login keyring (if
available).If you already have Cisco AnyConnect set-up, then--serverargument is
optional. Also, the last used--serveraddress is saved between sessions so
there is no need to always type in the same arguments:$openconnect-sso[info]AuthenticatingtoVPNendpoint...Configuration is saved in$XDG_CONFIG_HOME/openconnect-sso/config.toml. On
typical Linux installations it is located under$HOME/.config/openconnect-sso/config.tomlFor CISCO-VPN and TOTP the following seems to work by tuning the config.toml
and removing the default "submit"-action to the following:[[auto_fill_rules."https://*"]]
selector = "input[data-report-event=Signin_Submit]"
action = "click"

[[auto_fill_rules."https://*"]]
selector = "input[type=tel]"
fill = "totp"Adding customopenconnectargumentsSometimes you need to add customopenconnectarguments. One situation can be if you get similar error messages:FailedtoreadfromSSLsocket:Thetransmittedpacketistoolarge(EMSGSIZE).
FailedtorecvDPDrequest(-5)or:DetectedMTUof1370bytes(was1406)Generally, you can addopenconnectarguments after the--separator. This is called"positional arguments". The
solution of the previous errors is setting--base-mtue.g.:openconnect-sso--servervpn.server.com/group--useruser@domain.com----base-mtu=1370#                                                          separator ^^|^^^^^^^^^^^^^^^ openconnect argsDevelopmentopenconnect-ssois developed usingNix. Refer to theQuick Start section of the Nix
manualto see how to get it
installed on your machine.To get dropped into a development environment, just typenix-shell:$nix-shell
Sourcingpython-catch-conflicts-hook.sh
Sourcingpython-remove-bin-bytecode-hook.sh
Sourcingpip-build-hook
UsingpipBuildPhase
Sourcingpip-install-hook
UsingpipInstallPhase
Sourcingpython-imports-check-hook.sh
UsingpythonImportsCheckPhase
Run'make help'foravailablecommands[nix-shell]$To try an installed version of the package, issuenix-build:$nixbuild[1built,0.0MiBDL]$result/bin/openconnect-sso--helpAlternatively you may justget Poetryand
start developing by using the includedMakefile. Typemake helpto see the
possible make targets.