usergroup not forwarded from the auth-dialog to NetworkManager for the VPN connection
When a usergroup is provided with the gateway address (e.g. vpn.company.com/usergroup), it is used for the initial connection made in the auth-dialog, but isn't forwarded to NetworkManager for the final VPN connection used by the system. As a result, the second connection either fails or registers as connected and doesn't operate properly.
The usergroup is provided by the urlpath in OpenConnect, and can be added to the NM_OPENCONNECT_KEY_GATEWAY as a path to the URL constructed with the hostname and port.