Integration of 2120 asa with azure AD

[kostasthedelegate]

Hello, 

I have created a VPN with SAML authentication. 

I have followed this guide 

https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/215935-configure-asa-anyconnect-vpn-with-micros.html#anc16

About these commands

trustpoint idp AzureAD-AC-SAML - [IdP Trustpoint] 
trustpoint sp ASA-EXTERNAL-CERT - [SP Trustpoint] 

 The first is the cert generated by Azure

What is the second one?

Has anyone performed this before?

Regards, 

Konstantinos

[Dinesh Moudgil]

Hi Kostas,

2nd trustpoint is configured on the ASA(in this case acting as service provider) itself for the ID certificate issued to ASA.

Check this doc I wrote for SAML with Duo and look for the trustpoint "ID_CERT" and you will see the configuration for it on ASA.
The same logic applies to Azure SAML integration.

https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/215672-integrate-duo-saml-sso-with-anyconnect-s.html

Thank you,

Dinesh Moudgil

P.S. Please rate helpful posts.