Anyconnect with AzureAD SAML and dual tunnel groups

[jkay18041]

Hello, I have setup a test VPN tunnel group with SAML on AzureAD following this guide. https://community.cisco.com/t5/security-documents/anyconnect-azure-ad-saml-sso/ta-p/3810013

In production I've got 2 different tunnel groups. How would I go about setting that up since I would have 2 different Reply URLs and 2 different Identity (Identifyer ID) links? Would I just add the two links in there or should I create a separate App in AzureAD?

Thank you

[Marvin Rhoads]

You will need to create two app instances in Azure AD since each will have a unique ID link.

[jkay18041]

ok, I will give that a try.

Thank you!