Azure AD with AnyConnect with Multiple SSO servers

[jf1134]

I have setup Azure MFA working with AnyConnect and it works fine. A problem I am having is I have a couple of different profiles that I was hoping to use. I tried in the AnyConnect App in Azure and create some new SAML configurations but the problem is the Entra Identifier is tied to the base URL for one profile

Next I tried and setup a new AnyConnect enterprise app and configured it with a different profile but when I try to set it up on the ASA, it won't let me because the Entra ID is the same

Is there anyway to have multiple ones on the ASA for the SAML server config?

Thanks

[Pulkit Mittal]

Try the steps mentioned in this article. It should fix the issues.

https://community.cisco.com/t5/security-knowledge-base/anyconnect-vpn-saml-sso-with-azure-idp-multi-tunnel-groups/ta-p/4563095

If you find this useful, please mark it helpful and accept the solution.

[jf1134]

So I have it working right now. The issue is I have a couple different Anyconnect Connection profiles setup on the ASA. It seems like the problem is that even though I create a different enterprise app in Azure they are still using the same Entra Identifier and Cisco won't let me create one that has a different base URL because those are the same.

So basically I need to be able to have different base URL's so that I can use the different profiles that I have setup.