Hello,
We are currently in the process of preparing for a migration from a pair of ASA 5525Xs to a pair of 2140 FTD appliances. We have SAML authentication configured on the ASAs for MFA to our Azure instance for AnyConnect remote access VPN which works great. However, it doesn't appear that SAML is supported on the FTDs running version 6.6.1 but was told that version 6.7 does support SAML. We decided to keep version 6.6.1 at the time because it was the suggested release and we didn't want to run 6.7 since it was just recently released.
We thought we could pass SAML authentication to ISE so that we could still MFA for remote access VPN but I am having a hard time finding documentation for it. My questions are these: Is it possible to use ISE to handle SAML authentication for remote access VPN so that clients can MFA before finally connecting? If so, what version of ISE supports it?
Thanks!
Terence
