AnyConnect SSO using Kerberos

[Antonio Macia]

Hi there,

Is it possible to perform SSO on mobile devices running AnyConnect and Per-App VPN, but not joined to the domain?  I need to migrate an existing environment using F5 Edge Client that has this functionality working but can't see any reference on how to perform this on Cisco and AnyConnect.

The use case consists on users accessing internal resources from their mobile phones (iOS, Android) without having to authenticate again since the Edge Client provides the user credentials transparently.

Regards.

[Mohammed al Baqari · Accepted solution]

No, you can do this with clientless vpn not with AnyConnect. The client
doesn't provide session cookie because its not publishing the applications.

[Antonio Macia]

Thanks Mohammed,

I'll discuss this caveat with the client. 

Regards.