We are still using ASA5516. Their only purpose is the Remote Access VPN. To harden our VPN access we implemented the Microsoft Authenticator via SAML and the Azure Active Directory. We followed the official Guide from Cisco, as well as Microsoft. We now have the Problem, that the authentication via Microsoft Authenticator works on the first login, but only at the first login. Every other login attempt is granted without the need of password or authenticator. Obviously the rollout is paused until that's fixed. Anyone had the same Problem?
