@Hjorthen
Reading both articles, they both mention two types of subscriptions that are required:
- An Azure AD subscription;
- A Cisco AnyConnect subscription that has SSO enabled on it.
I have zero idea about Cisco subscriptions, but for Azure AD, you could probably get through the testing phase with an Azure AD Basic (free) licence - if you don't already have that or better at your disposal.
One point to note here is that Azure AD Basic doesn't come with the ability to manage MFA in a per user basis. You can only make certain MFA configuration changes for the organisation as a whole. If the organisation is already on Azure AD Basic licencing then you might want to uplift your own licence to an Azure AD P1 licence so you can make more granular MFA and AAD changes using your account as the test bed. But this is something you'll have to figure out for yourself.
Once testing is done, you most likely would want to look at the Azure AD P1 subscription, but ultimately that's dependent on what you already have (if anything) and what you're looking to achieve.
You can get an estimate using this Microsoft licencing page (there's also a link to the pricing calculator on that page, too) but numerous sectors (such as education, charity, etc) are eligible for discounts meaning you'd want to get a final price from your account manager - if you have one.
If your organisation is already on Azure AD P1 or greater licencing, then it's quite likely you will not have to pay any extra in relation to the Azure AD subscription requirement. You'll just have to quantify the Cisco AnyConnect subscription cost.
