This workflow enables you to start, stop, and get the status of an OpenConnect VPN. Here is the controller's gist and the workflow. You'll also need to add the following three lines to your sudoers file via visudo:
Cmnd_Alias OPENCONNECT = /usr/local/bin/openconnect --passwd-on-stdin --config=* * &> /usr/local/var/log/openconnect.log
%admin ALL=(ALL) NOPASSWD: OPENCONNECT
%admin ALL=(ALL) NOPASSWD: /usr/bin/killall -HUP openconnect