Headless solution?

[youknow16]

Is there anyway to do this on a headless server?
Maybe the program can give a URL for use to open on his computer and paste the result back in the terminal?

[dlenski]

You have multiple options here. The most straightforward ones:

1. Use gp-saml-gui, but then add --authenticate to the OpenConnect command line to only do the authentication phase on the graphical terminal, and then use the authentication token to actually start the connection on the server, as described in https://www.infradead.org/openconnect/manual.html#opt-authenticate

2. As mentioned in the README here…

   Interactive login is, unfortunately, sometimes a necessary alternative to automated login via scripts such as zdave/openconnect-gp-okta.