AnyConnect with Azure AD

[jf1134]

I'm having an issue after logging in. I went through all the config set. When I login I get prompted for username and password but after I confirm it on MS Auth I get 

Can’t reach this page
Make sure the web address https://abc.domainname.com is correct

I can go to https://abc.domainname.com and the site comes up and and the see the Alias but I get this

This abc.domainname.com page can’t be found
No webpage was found for the web address: https://abc.domainname.com/+CSCOE+/SAML/SP/Test-MFA
HTTP ERROR 404

abc.domainname.com has a valid DNS A record that points to the ASA public IP.

I'm not sure what else to check.

[Ruben Cocheno · Accepted solution]

@jf1134 

Can you check if you following the format below? Don't recall if it depends of the version

 a. Identifier (Entity ID)  - https://<VPN URL>/saml/sp/metadata/<TUNNEL-GROUP NAME> 

 b. Reply URL (Assertion Consumer Service URL) - https://<VPN URL>/+CSCOE+/saml/sp/acs?tgname=<TUNNEL-GROUP NAME> 

https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/215935-configure-asa-anyconnect-vpn-with-micros.html

[jf1134]

Thanks.. Yeah it was the Reply URL. I messed up the end and put /acs/?tgname=Test-VPN instead of /acs?tgname=Test-MFA