MFA with GlobalProtect

[Adam Mercer]

Hi

We use a GlobalProtect VPN at work and they recently required the
usage of Microsoft MFA when connecting, I've been trying to get this
working with openconnect but have been having problems. I've built the
latest client from git and am using:

# openconnect --protocol=gp vpn.address.com

and this results in:

SAML REDIRECT authentication is required via
https://login.microsoftonline.com/<string>/saml2?SAMLRequest=<strong>RelayState=<string>%3D%3D
When SAML authentication is complete, specify destination form field
by appending :field_name to login URL.

If I visit the URL in my browser I see

Login Successful!

How do I determine field_name from this?

Cheers

Adam