Does SAML work with anyconnect / phone?

[JustinHoMi1]

What is the experience like when logging in with the Cisco Anyconnect client for iPhone or android, using SAML / Duo Access Gateway? Does this work, or is there a better method?

Thanks,
Justin

[DuoKristina]

Cisco AnyConnect mobile or desktop apps at version 4.6 or higher support SSO/SAML login.

[JustinHoMi1]

Nice, so what’s the user experience like? Does it redirect to a web browser for entering credentials?

[DuoKristina]

Yes. There is a click-through SAML SSO demo here. It shows the desktop AnyConnect client, but the auth process is similar for the mobile clients.

[Stanislav Galchonkov]

I’ve never could get SAML based SSO working on mobile iPhone/Android AnyConnect App.
It’s not even showing as an available connection profile inside of AnyConnect mobile app (other than saml authentication based profile is listed and works fine, e.g. AAA (local), AAA(ldap)). PC works fine as in demo.

[DuoKristina]

Did you create the new VPN connection in AnyConnect mobile for the SSO login server address? It definitely works; here’s a screenshot of the Duo Single Sign-On login web page in AnyConnect Android on my own phone.

You might benefit from opening a case with Duo Support.