topic Re: Remote Access VPN using Cisco ISE and Microsoft Authenticator in Network Access Control

Remote Access VPN using Cisco ISE and Microsoft Authenticator

rtromans01 — Mon, 30 Oct 2023 11:31:22 GMT

Hi all,

Currently we have Cisco FirePowers as our VPN connectors and using Anyconnect as out VPN client.

We are using Microsoft NPS for Radius authentication with AD and Microsoft Authenticator for MFA.

We are looking to introduce the number challenge with MS Authenticator for MFA and as part of this change I would like to introduce Cisco ISE to replace the NPS element. We are currently running version 3.2 patch 3 in ISE and after upgrading I noticed an announcement about SAML integration.

Does anyone know if what I'm trying to achieve is possible and if there are any documents out there that may help, or has anyone else managed to implement this....

Many thanks

Richard

Re: Remote Access VPN using Cisco ISE and Microsoft Authenticator

M02@rt37 — Mon, 30 Oct 2023 12:14:08 GMT

Hello @rtromans01,

You'll need to configure SAML integration between these components to achieve your goal.

Re: Remote Access VPN using Cisco ISE and Microsoft Authenticator

Greg Gibbs — Mon, 30 Oct 2023 22:38:49 GMT

See Cisco VPN: FTD & Microsoft: MS AAD ISE AuthZ with Posture

Your use case would be the same flow, just without the Posture.