I am planning to integrate with Cisco DUO with Anyconnect VPN running on ASA. I am planning to create local users on ASA to create Anyconnect profile for primary authentication. I am also planning to integrate Cisco DUO for MFA with the Anyconnect. I want to to know if DUO can work in this case as there is not separate Active Directory/RADIUS server available for primary authentication since users will be locally created on ASA. Please share your thoughts on how I can integrate DUO with anyconnect.