Anyconnect VPN will server certificate and AD authentication

[S891]

I am trying to look for configuration for ASA Anyconnect VPN. I will be using a  VPN server certificate and also configuring AD authentication.

What I mostly see is Certificate authentication is used as part of dual authentication. Can anyone point me to the correct guide/configuration?

[Karsten Iwen]

The ASA is always authenticated with the server-certificate of the ASA.

Do I understand you right that you want to authenticate the user just by username/password against the AD?

Then in the connection-profile (tunnel-group in CLI) you only have to choose "AAA" and point to an aaa-server-group that uses the AD. For that you have the choice to use RADIUS against the Windows NPS or to use LDAP. RADIUS with NPS will give you some more flexibility.

[S891]

Yes, I only need AD authentication to be performed. I am looking for step-by-step config guide. 

[Karsten Iwen]

Perhaps this document can help you:

https://supportforums.cisco.com/document/57886/asavpnwithnpsdocx