topic Using SSO / Cached Credentials with MFA in Network Security

Using SSO / Cached Credentials with MFA

joemrris1 — Tue, 23 Jan 2024 09:47:25 GMT

Hi,

I have configured MFA authentication for the Cisco AnyConnect VPN, however it still requires the full email and password each time, prior to sending the MFA prompt.

Is there a way to configure AnyConnect to use the credentials on the machine so that the user is only required to authenticate using the MFA prompt, and not a full logon as well.

Thanks!

Re: Using SSO / Cached Credentials with MFA

Marius Gunnerud — Thu, 25 Jan 2024 23:15:40 GMT

As far as I know you cannot pass the machine credentials to AnyConnect on login. An option could be to use certificate authentication with SAML. Then you users would not need to enter username and password, but still be required to perform dual authentication.

Re: Using SSO / Cached Credentials with MFA

hash2k2 — Mon, 04 Mar 2024 06:57:59 GMT

I just set up Cisco AnyConnect with Azure MFA and at our clients the cached/stored credentials for Teams or Outlook are getting passed to AnyConnect. So, you click "connect" and the connection is build up. If you use a notebook without any Teams or Outlook profile, you get asked for username/password and the MFA token. I am looking for how to get this removed.