topic Re: OAuth for Anyconnect VPN users in Network Security

OAuth for Anyconnect VPN users

User_80617 — Mon, 31 Jan 2022 07:48:43 GMT

Hi,

We know that Cisco supports anyconnect over SAML, but does OAuth also supported? If yes, how to confiurate it on cisco asa. I dont see any as such config document. Please need a quick response.

Thanks in advance.

Re: OAuth for Anyconnect VPN users

Marvin Rhoads — Tue, 01 Feb 2022 03:39:38 GMT

It's not directly supported. However some SAML identity providers (iDPs) may use OAuth on the backend. In those cases the ASA uses SAML to the iDP and the iDP takes care of the OAuth bits.

Re: OAuth for Anyconnect VPN users

User_80617 — Thu, 03 Feb 2022 09:54:36 GMT

Hi Marvin,

Any way to use OAuth via API on cisco ASA?

Re: OAuth for Anyconnect VPN users

Marvin Rhoads — Thu, 03 Feb 2022 12:35:15 GMT

@User_80617 I don't believe so. We can configure authentication by using the API but not authenticate using it.

https://www.cisco.com/c/en/us/td/docs/security/asa/api/asa_rest_api.html#_Toc439951904