free choice of authgroups

[Nikos Mavrogiannopoulos]

On Mon, 2014-05-19 at 07:59 -0700, Kevin Cernekee wrote:

> On Cisco this could be done through a group-url.  So instead of
> entering a bare hostname, the user would enter something like
> "https://vpn.foo.com/my-group-url".  The group-url namespace is
> separate from the authgroup names used in the dropdown list, and so it
> can include hidden groups.
> More recently we also saw a case where fields in the client cert were
> used to select the group.

Couldn't openconnect set the group-select xml tag if --authgroup is
specified on command line? Is there an issue if that's implemented? That
will allow the user to specify a group using the same method even if a
list isn't presented.

regards,
Nikos