topic Re: SSL VPN Authorization using Azure SAML in Network Security

SSL VPN Authorization using Azure SAML

hdesta — Sun, 05 Feb 2023 01:53:55 GMT

Is Azure SAML Authorization supported for SSL VPN on Cisco ASA Software version 9.16.3.23? if so, any documentation available?

Thanks!

Re: SSL VPN Authorization using Azure SAML

balaji.bandi — Sun, 05 Feb 2023 10:17:14 GMT

check this may be useful :

https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/215935-configure-asa-anyconnect-vpn-with-micros.html

Re: SSL VPN Authorization using Azure SAML

hdesta — Sun, 05 Feb 2023 13:25:23 GMT

Thanks, but the link is for SAML authentication, not for Authorization. I have SAML authentication working already.

Re: SSL VPN Authorization using Azure SAML

hdesta — Sun, 05 Feb 2023 13:34:13 GMT

I found this Cisco doc. Starting on page 31 it talks about:

Configure SAML Authorization Using DAP
You can configure SAML authorization and group policy selections using DAP, without having to rely on an
external server (RADIUS or LDAP) to retrieve authorization attributes.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa919/asdm719/vpn/asdm-719-vpn-config/vpn-asdm-dap.pdf

Re: SSL VPN Authorization using Azure SAML

balaji.bandi — Sun, 05 Feb 2023 17:41:30 GMT

Sure i just suggest that link and forgot the authorization one.. it good you found one.

Re: SSL VPN Authorization using Azure SAML

hdesta — Sun, 05 Feb 2023 18:33:36 GMT

Unfortunetly, the link i found it does not tell you on how to setup the Azure SAML side in order to recieve the group saml assertion.