Cisco ASA Anyconnect VPN integration with Azure MFA

[vikz230884]

Hi Expert,

We are trying to integrate Cisco Anyconnect with Azure MFA using LDAP.

The previous setup is without MFA and user autheticated will get specific segment and specific ACL (authorization) 

Now with MFA the authentication is successful but the user didn't get the automap attribute.

Is this still achievable with MFA ? If this achievable can you guys help me point to the document ?

I am using this site/doc as reference

https://azure.microsoft.com/en-us/documentation/articles/multi-factor-authentication-advanced-vpn-configurations/

Thanks in advance. 

[Tee Bee]

I'm having the same issue. Our current setup is looking at the users security group member to limit access. I can pass a radius attribute to apply the ACL but that will enforce only that ACL to all users. We are using ASA/ACS currently to do this.