Using EntraID SAML attributes in DAP

[aclark_pds]

I have configured SAML authentication for AnyConnect using Azure/Entra and this is working well, I am now trying to configure a dynamic access policy to assign an ACL based on attributes received in the SAML token but it is not working as expected and after many hours I can't work out why, has anyone successfully done this? 

Configured using CDO

FTD version 7.2.5

AnyConnect Version 4.10.07061

[crHL]

Did you find any resolve for this?

I have the same issue when trying to integrate Duo's solution for this, and was thinking of switching to Entra.  However, now that I know it didn't work with Duo I decided to search if it was a problem with Entra and found your post.  Before I waste even MORE time implementing something that isn't going to end up working, I was hoping to find out if you had success.