Anyconnect Client autoconnect for users

[glodynto1]

With our new WFH environment at our company, the number of users connecting via Anyconnect has of course increased. Before it was only a fraction of our company but with the influx of users it is now being asked if it is possible for our users to not have to enter their user credentials and for Anyconnect to connect automatically once logged in on their machine.

We have one client profile with most of the basic preferences enabled. One client connection profile (tunnel group).

The client version we are using is Anyconnect version 4.6

Not very familiar with Anyconnect configurations so any help in the matter would be greatly appreciated

[Rob Ingram]

Hi,

You cannot transparently pass through a logged in user's credentials to AnyConnect, but you could authenticate using certificates which would remove the requirement for the user to enter a username and password.

Examples here:-

https://community.cisco.com/t5/security-blogs/anyconnect-certificate-based-authentication/ba-p/3105546

https://www.youtube.com/watch?v=x9OFBSYb648

If you wish to implement this I'd recommend setting up a 2nd tunnel-group for testing before rolling out certificates and the AnyConnect profile changes.

If you have Active Directory you can roll out the certificates to your computers via GPO.

HTH