AnyConnect Azure AD integration

hello

I have configured a SAML authenticated VPN connection on an ASAv

when a user connects to the page & inputs credentials they see an error message 

"Application with identifier https://string/ was not found in the directory 

This can happen if the Application has not been installed by the Administrator of the tenant or consented to by any user in the tenant . You may have sent your request to the wrong tenant 

Q any ideas on how to resolve this issue ?

we have configured our SAML idP with login & logut URL supplied by the Administrator of the AD