CSCvm86891 - ENH: SAML support with SBL (Start Before Logon)

[jknetservices]

CSCvm86891 - ENH SAML support with SBL (Start Before Logon) - 1- What happened to all of the previous posts on this bug?  There were quite a few posts from people who want to see this issue resolved, and they are all gone now.  What gives, Cisco?

[jknetservices]

Odd - I was able to find them by searching for CSCvm86891 on the discussion boards, but these discussions are no longer showing up in the "Community Discussion" section of the bug report page itself:
 

[chong00011 · Accepted solution]

The discussion is still there but the bug is not yet fix by cisco. Cisco please make this work. we need it in our environment. 

[mgrzesia]

Hello,

This feature has been denied after analysis due to Windows design preventing it.

Please use management tunnel instead, with certificate authentication, and user tunnel authentication with SAML.

AnyConnect / Cisco Secure Client
https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/Cisco-Secure-Client-5/admin/guide/b-cisco-secure-client-admin-guide-5-0/configure_vpn.html#id_100260

FTD managed with FMC:
https://www.cisco.com/c/en/us/support/docs/security-vpn/secure-socket-layer-ssl/217040-configure-ssl-anyconnect-management-vpn.html

ASA:
https://www.cisco.com/c/en/us/support/docs/security/adaptive-security-appliance-asa-software/215442-configure-anyconnect-management-vpn-tunn.html