https://community.cisco.com/t5/network-access-control/ise-3-1-integration-with-azure-active-directory-for-vpn-access/m-p/4722537#M578291 <P>Yes, VPN headend is Cisco ASA. In our case ISE is used for Autentication and Authorization via configuration more then one external data sources. We would like to configure Authentication on ISE with external identity source Azure Active Directory. Could you send me link for configuration guide for direct ISE - AAD integration / extnernal identity source Autentication? Is this scenario supported?</P><P>&nbsp;</P> Wed, 16 Nov 2022 15:06:47 GMT EDUARD LORENC 2022-11-16T15:06:47Z https://community.cisco.com/t5/network-access-control/ise-3-1-integration-with-azure-active-directory-for-vpn-access/m-p/4721808#M578277 <P>Can i get any reference documents or link to implement Two factor authentication for VPN users using ISE and external identity source Azure Active Directory?</P> Tue, 15 Nov 2022 14:11:13 GMT https://community.cisco.com/t5/network-access-control/ise-3-1-integration-with-azure-active-directory-for-vpn-access/m-p/4721808#M578277 EDUARD LORENC 2022-11-15T14:11:13Z https://community.cisco.com/t5/network-access-control/ise-3-1-integration-with-azure-active-directory-for-vpn-access/m-p/4722109#M578288 <P>What are you using as the VPN headend? The smoothest way to do this is typically to use SAML for the MFA directly on the VPN headend (e.g. ASA or FTD) and use ISE on the backend for Authorize Only.</P> <P>&nbsp;</P> Wed, 16 Nov 2022 00:29:09 GMT https://community.cisco.com/t5/network-access-control/ise-3-1-integration-with-azure-active-directory-for-vpn-access/m-p/4722109#M578288 Greg Gibbs 2022-11-16T00:29:09Z https://community.cisco.com/t5/network-access-control/ise-3-1-integration-with-azure-active-directory-for-vpn-access/m-p/4722537#M578291 <P>Yes, VPN headend is Cisco ASA. In our case ISE is used for Autentication and Authorization via configuration more then one external data sources. We would like to configure Authentication on ISE with external identity source Azure Active Directory. Could you send me link for configuration guide for direct ISE - AAD integration / extnernal identity source Autentication? Is this scenario supported?</P><P>&nbsp;</P> Wed, 16 Nov 2022 15:06:47 GMT https://community.cisco.com/t5/network-access-control/ise-3-1-integration-with-azure-active-directory-for-vpn-access/m-p/4722537#M578291 EDUARD LORENC 2022-11-16T15:06:47Z https://community.cisco.com/t5/network-access-control/ise-3-1-integration-with-azure-active-directory-for-vpn-access/m-p/4722723#M578295 <P>No, that option is not supported. See a similar discussion with additional links in this post...</P> <P><A href="https://community.cisco.com/t5/network-access-control/azure-ad-mfa-for-anyconnect-vpn-clients-with-ise-3-0-rest-id/td-p/4434039" target="_blank" rel="noopener">Azure AD MFA for Anyconnect VPN clients with ISE 3.0 REST ID</A>&nbsp;</P> <P>&nbsp;</P> Wed, 16 Nov 2022 20:22:11 GMT https://community.cisco.com/t5/network-access-control/ise-3-1-integration-with-azure-active-directory-for-vpn-access/m-p/4722723#M578295 Greg Gibbs 2022-11-16T20:22:11Z