Anyconnect can use private IP for do SAML authentication

[jewfcb001]

HI ALL ,

  I would like you to confirm information about Anyconnect can integrate Microsoft Azure with private IP ?

Because I see some configuration on Azure need IP/VPN URL for Azure reach .  and If I need  tunnel-group1 to authenticate with Microsoft Azure

and tunnel-group2 to authenticate with radius . Can we do that ? 

 

Reference : https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/215935-configure-asa-anyconnect-vpn-with-micros.html

Step 7. Edit Section 1 with these details. 

 a. Identifier (Entity ID)  - https://<VPN URL>/saml/sp/metadata/<TUNNEL-GROUP NAME> 

 b. Reply URL (Assertion Consumer Service URL) - https://<VPN URL>/+CSCOE+/saml/sp/acs?tgname=<TUNNEL-GROUP NAME> 

[jewfcb001]

I need someone to help. 

Thank you.