FTD Authentication with Azure MFA

I recently configured Azure MFA to authenticate AnyConnect users connecting to a FTD firewall. This required some odd workarounds. Problems to work around FTD cannot do SAML, must use RADIUS for AnyConnect AAA (note: later versoins of FTD are SAML ...