Cisco ASAv Anyconnect SSO (SAML) with Azure

Mohammed Ismail Shareef — Sat, 06 Jun 2020 00:49:45 GMT

Hello,

I have configured Anyconnect on ASAv and configured SAML authentication with Azure.

When I test the SSO using web I am redirected back to the same asa logon page.

With Anyconnect client its says "Authentication failed due to problem retrieving the single sign-on cookie".

Cisco Adaptive Security Appliance Software Version 9.12(3)12
SSP Operating System Version 2.6(1.198)
Device Manager Version 7.12(2)14

webvpn
enable Outside
hsts
enable
max-age 31536000
include-sub-domains
no preload
anyconnect image disk0:/anyconnect-win-4.8.03043-webdeploy-k9.pkg 1
anyconnect enable
saml idp https://sts.windows.net/XXXXXXXXXXXXXXXX/
url sign-in https://login.microsoftonline.com/XXXXXXXXXXXXXXXX/saml2
url sign-out https://login.microsoftonline.com/common/wsfederation?wa=wsignout1.0
base-url https://anyconnect.mydomain.com
trustpoint idp AzureAD-AC-SAML
trustpoint sp ASDM_TrustPoint1
no signature
no force re-authentication
tunnel-group-list enable
cache
disable
error-recovery disable

tunnel-group AnyConnect type remote-access
tunnel-group AnyConnect general-attributes
address-pool AnyConnect-Pool
default-group-policy GroupPolicy_AnyConnect
tunnel-group AnyConnect webvpn-attributes
authentication saml
group-alias AnyConnect enable
saml identity-provider https://sts.windows.net/XXXXXXXXXXXXXXXXXXX/

: end

Kindly suggest.

Re: Cisco ASAv Anyconnect SSO (SAML) with Azure

Mohammed Ismail Shareef — Thu, 25 Jun 2020 02:07:02 GMT

Hi Everyone,

I went little ahead and tried multiple codes and failed couple of time.

At last when I tried 9.8(2), it worked like charm. I really do not know what was the problem with other higher code versions.

Thanks

Mohammed

topic Cisco ASAv Anyconnect SSO (SAML) with Azure in Network Security

Cisco ASAv Anyconnect SSO (SAML) with Azure

Re: Cisco ASAv Anyconnect SSO (SAML) with Azure