XML Response has no "auth" node (Fedora 42)

Hi All,

when I try to connect cisco anyconnect client with network manager (gui

1. My Browser opens and I log in with SSO
2. I am getting the message:

XML response has no "auth" node. The log is below

I use fedora 42 with all patches;

openconnect-9.12-7.fc42.x86_64
NetworkManager-openconnect-1.2.10-7.fc42.x86_64
NetworkManager-openconnect-gnome-1.2.10-7.fc42.x86_64

Any idea how to fix it? Thanks a lot

POST https:/MYVPN/
Attempting to connect to server XXXX
Connected to XXXX
Using certificate file XXXX
Using private key file XXXX
Using client certificate 'XXXX'
SSL negotiation with XXXX
Connected to HTTPS on XXXXX with ciphersuite (TLS1.2)-(ECDHE-X25519)-(RSA-SHA256)-(AES-128-GCM)
Got HTTP response: HTTP/1.1 200 OK
Content-Type: text/xml; charset=utf-8
Transfer-Encoding: chunked
Cache-Control: no-store
Pragma: no-cache
Connection: Keep-Alive
Date: Mon, 13 Oct 2025 21:59:48 GMT
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob:; frame-ancestors 'self'; base-uri 'self'; block-all-mixed-content
Cross-Origin-Opener-Policy: same-origin-allow-popups
X-Aggregate-Auth: 1
HTTP body chunked (-2)
XML POST enabled
< Host: localhost:29786
< User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0
< Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
< Accept-Language: en-US,en;q=0.5
< Accept-Encoding: gzip, deflate, br, zstd
< DNT: 1
< Connection: keep-alive
< Upgrade-Insecure-Requests: 1
< Sec-Fetch-Dest: document
< Sec-Fetch-Mode: navigate
< Sec-Fetch-Site: cross-site
< Priority: u=0, i
Got encrypted SSO token of 157 bytes
POST XXXX
SSL negotiation with XXXX
Connected to HTTPS on XXXX with ciphersuite (TLS1.2)-(ECDHE-X25519)-(RSA-SHA256)-(AES-128-GCM)
Got HTTP response: HTTP/1.1 200 OK
Content-Type: text/xml; charset=utf-8
Transfer-Encoding: chunked
Cache-Control: no-store
Pragma: no-cache
Connection: Keep-Alive
Date: Mon, 13 Oct 2025 22:00:10 GMT
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob:; frame-ancestors 'self'; base-uri 'self'; block-all-mixed-content
Cross-Origin-Opener-Policy: same-origin-allow-popups
X-Aggregate-Auth: 1
HTTP body chunked (-2)
XML response has no "auth" node