Has anyone set up openconnect with SSO?

[jrittenh]

My work VPN uses Cisco AnyConnect, but redirects to Okta for SSO. I read something at some point that NetworkManager in Gnome is able to pop up the browser window to do SSO login, but I can't seem to trigger it correctly. I also don't know if I've even set it up correctly. I've emerged net-vpn/openconnect with gnutls and nls USE flags, and net-vpn/networkmanger-openconnect with the gtk USE flag. In the Gnome VPN configuration, I have the protocol as "Cisco AnyConnect or OpenConnect" and the gateway set to my work VPN address. The reported OS is linux-64. Those are the only settings configured. When I connect, it gives a 404, then a 302 redirect, then a 200 and a Gnome/NetworkManager login box appears, which doesn't work. I don't know enough about the workings of NM or OpenConnect to know what I might need. So does anyone know what I'm missing?