Anyconnect can authentication 2 option for SAML and Radius

[jewfcb001]

Hi All ,

I would like to find the solution about ASA can do 2 option for authentication or not  ? 

1.  ASA ---> Microsoft Authenticator 

and 

ASA ----> Radius Server  ---> 2FA

Can i change only configuration on tunnel or Can I do automatic for switchover with that method? 

tunnel-group AnyConnectVPN-1 webvpn-attributes
saml identity-provider https://sts.windows.net/xxxxxxxxxxxxx/
authentication saml

tunnel-group AnyConnectVPN-1 general-attributes
authentication-server-group (xxx) Radius-Server
accounting-server-group Radius-Server

and Can I choose one by one ? 

Please recommend me. 

[balaji.bandi]

depends on which one you like to use :

follow below guide :

https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/215935-configure-asa-anyconnect-vpn-with-micros.html

[jewfcb001]

@balaji.bandi 

Thank you . I think this link from you . It's only authentication with Azure MFA but I would like to find automatic method to change Azure MFA to authentication with radius server. what can i do that ?