Description of problem:


I was just trying out the latest OpenConnect 9.0.1 and corresponding NetworkManager-openconnect update (2048406). That added support for SAML based logins, which is helpful.

I tried it out, and unfortunately I was met with an error:
Failed to spawn external browser for https://(path to my SAML-enabled AnyConnect profile)


If I manually visit that link while the nm-openconnect dialog is up and complete the SAML login, then the browser posts back to OpenConnect's endpoint (localhost:29786), and the VPN connection completes successfully.


This is consistent with a similar issue on Arch described at https://gitlab.com/openconnect/openconnect/-/issues/454 . They pointed to the missing xdg-open support in the build as the culprit.


Version-Release number of selected component (if applicable):
openconnect-9.01-2.fc36 


How reproducible:
Consistent

Steps to Reproduce:
1. Get a VPN connection using SAML-based authentication
2. Create a connection in Gnome-NetworkManager, using the https URL in the Gateway. Select VPN protocol "Cisco AnyConnect or OpenConnect"
3. Leave remaining fields empty
4. Try to connect using network manager. Click "Login"

Actual results:
"Failed to spawn external browser for <omitted private URL>"

Expected results:
I would expect it to open a browser window (via xdg-open) to complete the SAML auth.