topic The easiest way is to in Network Security https://community.cisco.com/t5/network-security/tunnel-group-mapping/m-p/3065798#M135191 <P>The easiest way is to configure a group-URL inside the tunnel group. The user enters this tunnel-group-specific URL in Anyconnect and lands on the right Tunnel-group.</P> Sat, 27 May 2017 05:42:07 GMT Karsten Iwen 2017-05-27T05:42:07Z tunnel-group mapping https://community.cisco.com/t5/network-security/tunnel-group-mapping/m-p/3065797#M135188 <P>Hi guys,</P> <P>I currently have one ASA configured with two tunnel-group - both using username and certificate authentication for AnyConnect users. this is working well. My question is what if there is another requirement for external users to be authenticated only by local username and password?&nbsp; It seems I have to create one more tunnel-group with local authentication. if that is the case, how ASA determine which tunnel-group to use?</P> <P></P> <P>thank you</P> Tue, 12 Mar 2019 09:25:37 GMT https://community.cisco.com/t5/network-security/tunnel-group-mapping/m-p/3065797#M135188 Junnan Wu 2019-03-12T09:25:37Z The easiest way is to https://community.cisco.com/t5/network-security/tunnel-group-mapping/m-p/3065798#M135191 <P>The easiest way is to configure a group-URL inside the tunnel group. The user enters this tunnel-group-specific URL in Anyconnect and lands on the right Tunnel-group.</P> Sat, 27 May 2017 05:42:07 GMT https://community.cisco.com/t5/network-security/tunnel-group-mapping/m-p/3065798#M135191 Karsten Iwen 2017-05-27T05:42:07Z