AAA and VPN Documentation

eten

I am looking for suggestions on how to document traffic flows & policies for AAA and VPN solutions. I tried to document the network flow by a flowchart but it got messy. Is there a way to efficiently document this, similar to a layer 3 network diagram?

AAA (ACS for wired and ISE for wireless) : We have multiple authentication and authorization policies linking to different identities sources. There seems to be too many conditions/objects to include.

VPN (clientless and anyconnect) : Multiple connection profiles and group policies.