Typical users have a lightminded attitude for password security. Our experience shows that even if a company uses strict policies, provides user training, etc., unencrypted devices still make their way outside the office.
Why MS Azure? Best AD integration, which is very convenient when the same VPN account is used for multiple resources.
Connecting to corporate resources via Cisco AnyConnect using FreeRadius and Google Authenticator has its pros and cons. One noteworthy advantage is the cost: it’s free.