cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
402
Views
6
Helpful
9
Replies

Duo Single Sign-On for Cisco ASA and FTD with AnyConnect

Vishal6
Level 1
Level 1

Hi All,

Can we use Azure AD as a Primary authentication for Duo Single Sign-On for Cisco ASA and FTD with AnyConnect. Also let me know where we can Entra ID as the authentication source for SSO 

9 Replies 9

Pulkit Mittal
Spotlight
Spotlight

Yes, you can use Azure AD as SAML for Duo Single Sign-on. Follow the steps from here. I have implemented this without any issues.

Configure (Entra ID) Azure AD as your Authentication Source. This will serve the purpose of validating the primary authentication.

Then configure the ASA for Duo single sign-on or FTD for single sign-on.

If you find this useful, please mark if helpful and accept the solution.

Do we required Auth Proxy server for Azure AD as a Primary authentication for Duo Single Sign-On ?

No, you don't. 

I have implemented the above without an authentication proxy server. Just with the azure ad.

Facing an issue where first level of authentication (using azure Ad) after connecting vpn showing Error "Authentication failed due to  problem verifying server certificate". Can anyone help me in this ?

Thanks for sharing the details.

Means just following link you have shared previously we'll able to complete the SSO process, apart from that nothing more required ?

 

Do you have the users sync in duo?

If not, then use this, https://duo.com/docs/azuresync

Hi Pulkit,

One last question, do i need to follow below link for succesfull integration of Duo Single Sign-On for Cisco ASA with AnyConnect.

https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/215935-configure-asa-anyconnect-vpn-with-micros.html

 

thanks in advance.

Hi Pulkit,

Facing an issue where first level of authentication (using azure Ad) after connecting vpn showing Error "Authentication failed due to problem verifying server certificate".  Have you also faced such ?

Quick Links