SAML IDP for Cisco Anyconnect

[F0rge]

Hi Experts,

in configuring SAML  for cisco anyconnect,  in the iDP settings, which Asa certificate is needed? the root certificate or identity certificate? kindly advise.

[Salman Mahajan]

You need not to worry about uploading ASA certificate on IDP side if you have below config in place under webvpn

no signature <<<< This configuration is guiding ASA not to sign the Authrequest that it sends to IDP