The correct VPN is for the Data Center Network. It is a split tunnel. Please do not set users up for a full tunnel to the office unless specifically requested.

The user account in AD must be in the OSINET.local\OSI\Users OU to be able to authenticate

Path for attached profile: C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client\Profile