When I needed to configure the same functionality that is described in this tech note, I ran into a few issues and thought it may help others if I share my knowledge around that. Start before login ...
AnyConnect Always-on VPN – The ASA administrator can configure AnyConnect to automatically establish and maintain an SSLVPN session as soon as the user logs into their operating system.