The key there is the check for compliance. They probably have an MDM or enterprise thing that ensures only approved apps are installed and all, and only then it issues a short lived certificate used to log into stuff.

The protocol itself is likely supported by OpenConnect but you'd have to actively circumvent IT's systems to make it work and thus a very bad idea.