LDAP authentication with ASA and WLC

[NetzKing]

Hi Team,

We are setting up new Cisco network infra in our organization. We just want to make AD user based authentication for web, Anyconnect VPN and Wi-Fi single sign on.

We have LDAP server and radius server both so can someone guide or share KB?

Setup:-

ASA5508-X in HA

3560 L3 switch in stack

3504 WLC

MS2016 Server environment.

[balaji.bandi]

There are different approach you can do.

WLC you can use Certificate to get in to network.

https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/7-5/High_Availability_DG.html

Once user in network with certificate, user can login used AD authentication to populate the domain permission / profiles. 

Web -  if the proxy is capable of LDAP integration this will automatically taking care of SSO.

Any connect also work with LDAP with remote access profile with LDAP.

Each integration is different, you need to work on each one to deploy 1 at a time and test it.

Make sure you have test environment to test before move to Production.

BB

BB