CSCvm86891 - ENH: SAML support with SBL (Start Before Logon)

[andrewnetworkguy80]

We are also looking for this very basic feature. Windows integrated login would be great too!

[mgrzesia]

Hello,

This feature has been denied after analysis due to Windows design preventing it.

Please use management tunnel instead, with certificate authentication, and user tunnel authentication with SAML.

AnyConnect / Cisco Secure Client
https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/Cisco-Secure-Client-5/admin/guide/b-cisco-secure-client-admin-guide-5-0/configure_vpn.html#id_100260

FTD managed with FMC:
https://www.cisco.com/c/en/us/support/docs/security-vpn/secure-socket-layer-ssl/217040-configure-ssl-anyconnect-management-vpn.html

ASA:
https://www.cisco.com/c/en/us/support/docs/security/adaptive-security-appliance-asa-software/215442-configure-anyconnect-management-vpn-tunn.html