AnyConnect Start Before Login with Azure MFA

[BCBurnett]

As part of a pilot effort, we have successfully configured our AnyConnect VPN to use Azure MFA for enhanced authentication.

When we use the same profile for Start Before Login access, we receive the error, "The requested authentication type is not supported during Start Before Login."

Are we heading down a wrong path -- i.e., this simply won't work for Start Before Login -- or do we need to keep reviewing options/material for the required configuration information.

Any assistance would be greatly appreciated.

MA

Bryan

[AdamF1]

This is not supported with anyconnect at this time. Cisco was supposedly working on this but no idea when it will be released or if there is an enhancement bug id

[stsargen]

I think this thread has the bug ID you are looking for.

https://community.cisco.com/t5/cisco-bug-discussions/cscvm86891-enh-saml-support-with-sbl-start-before-logon-1/td-p/4303604