Enable Azure MFA with Certificate Check on Anyconnect

[pagosojayson]

Hi,

Our company is targetting to enable Azure MFA on AnyConnect VPN (we are using FTD).  But we also do not want to lose the ability of our VPN to check the certificates of the device logging into the VPN.  Is this possible to do?  I do not see any option on how I can do this on FTD. But it would be great if someone has done this before or can point me out to the proper resources on how we can achieve this?

This is how we currently authenticate our machines/users to the VPN

We want to enable SAML but it does not give us the option to check Client Certificates.

Thank you in advance

[Josue Brenes]

You might want to take a look at the following link, it applies for ASA as well as for FTD:

https://community.cisco.com/t5/vpn/asa-anyconnect-vpn-with-saml-and-certificate-authentication/m-p/4061350#M271571

Rate if it helps.

Regards,

Josue Brenes

TAC - VPN Engineer.