SSL VPN Authorization using Azure SAML

[hdesta]

Is Azure SAML Authorization supported for SSL VPN on Cisco ASA Software version 9.16.3.23? if so, any documentation available?

Thanks!

[balaji.bandi]

check this may be useful :

https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/215935-configure-asa-anyconnect-vpn-with-micros.html

[hdesta]

Thanks, but the link is for SAML authentication, not for Authorization. I have SAML authentication working already. 

[hdesta]

I found this Cisco doc.  Starting on page 31 it talks about:

Configure SAML Authorization Using DAP
You can configure SAML authorization and group policy selections using DAP, without having to rely on an
external server (RADIUS or LDAP) to retrieve authorization attributes.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa919/asdm719/vpn/asdm-719-vpn-config/vpn-asdm-dap.pdf

[balaji.bandi]

Sure i just suggest that link and forgot the authorization one.. it good you found one.

[hdesta]

Unfortunetly, the link i found it does not tell you on how to setup the Azure SAML side in order to recieve the group saml assertion.