What kind of prompt does your company 2FA provide? Using openconnect with networkmangler, I get a pop up to input my pin+totp. I haven’t done the script way in the last few years, but the connection script is plain shell and I was able to handle the 2FA from there too