Require SAML 2.0 for Anyconnect

[danielbusisa1410]

I want to deploy SAML 2.0 on my environment and i am still using anyconnect version 4.1. is it still exist to use SAML 2.0 or any minimum requirement for SAML 2.0 ?

Thank you for replying my post.

[Rob Ingram · Accepted solution]

Hi,

You should look to upgrade from AnyConnect 4.1,as it's 5 years old and no further updates will be available.

In addition AnyConnect SAML support was added to allow an AnyConnect 4.4 client to access SAAS-based applications using SAML 2.0. AnyConnect 4.6 introduces an enhanced version of SAML integration with an embedded browser.

Reference:-

https://www.cisco.com/c/en/us/td/docs/security/asa/asa97/configuration/vpn/asa-97-vpn-config/webvpn-configure-users.html#topic_3D9C418D1A6D489FBC88F760215AFD26

Aside from the additional SAML support on the newer versions, you should look to upgrade to AnyConnect 4.7 minimum as this provides the best peformance of Remote Access VPNs.

HTH

[danielbusisa1410]

Hi Rob,

Thank you for your answer, 

also i want to ask, i use IOS version 9.5 in my cisco ASA. is still exist for SAML 2.0?

Thank you

[Rob Ingram]

Hi,

I believe SAML 2.0 was first introduced on ASA v9.7, as per release notes

https://www.cisco.com/c/en/us/td/docs/security/asa/asa97/release/notes/asarn97.html

You should probably consider upgrading to a recommended ASA version, version 9.10 or above is recommended for Remote Access VPN performance enhancements (DTLS 1.2).

Version 9.12.3 is a current recommended version

https://software.cisco.com/download/home/284143129/type/280775065/release/9.12.3%20Interim

HTH