topic ISE integration with OKTA on an Anyconnect VPN Connection in Network Access Control

ISE integration with OKTA on an Anyconnect VPN Connection

drivera_ — Fri, 14 Jun 2019 14:18:58 GMT

Hello everybody,

I have a customer who wants to implement an anyconnect VPN with 2FA through OKTA. He has an ASA, ISE and they want to include the okta server in this deployment, but I don't know exactly what are the requirements and what are the connections we have to do. I was thinking about a connection between ASA - ISE - OKTA - AD, but I'm not pretty sure if this is correct. I have read this document https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Borderless_Networks/Unified_Access/BYOD_Design_Guide/BYOD_Remote_Device_Access.pdf but it shows the connection with RSA and it not shows a completely configuration and deployment. I've been searching on the web but only found ISE+OKTA for wireless authentication, or ASA - ISE -DUO - AD, but I think DUO uses a different way for connection and communication. I was wondering if you guys can help me with information about this topic or if you know how to implement this.

Thank you so much in advance.

Re: ISE integration with OKTA on an Anyconnect VPN Connection

ldanny — Sun, 16 Jun 2019 14:35:34 GMT

We have this integration guide with OKTA

https://community.cisco.com/t5/security-documents/notes-on-okta-as-saml-idp/ta-p/3644284

Re: ISE integration with OKTA on an Anyconnect VPN Connection

yalbikaw — Sun, 16 Jun 2019 18:15:08 GMT

i have done integration with okta for saml sso

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/213754-configure-ise-2-3-guest-portal-with-okta.html

check it it might be helpful for you,.

Re: ISE integration with OKTA on an Anyconnect VPN Connection

hslai — Tue, 02 Jul 2019 04:24:57 GMT

Okta MFA for Cisco VPN is what I found at the vendor site. And, it has Okta MFA for Cisco VPN Integration Guide