Firepower Anyconnect SAML Authentication

[romarroca]

Hi guys!

I need some clarifications with the migration I am working on. There is an OLD ASA with Anyconnect configuration that uses SAML for authentication:

saml idp <<snip>>
url sign-in <<snip>>
url sign-out <<snip>>
base-url <<snip>>
trustpoint idp DUO_CA_CERT
trustpoint sp DUO_CA_CERT
no signature
no force re-authentication

Now we are migrating this configuration to a new Firepower. Can we just use the same information above and just re-upload the CA-CERT or we have to create new "Protect" instance in the DUO portal that will generate new IDP and CA cert?

Regards,

Romar

[Marvin Rhoads]

If the VPN tunnel-group isn't changing you should be able to continue to use the same application instance in the Duo portal with its associated certificates and metadata.