Add Duo protection to earlier ASA versions with our ASA LDAPS SSL VPN or ASA RADIUS with An圜onnect configurations.įamiliarize yourself with the limitations of ASA SAML 2.0 authentication by reviewing the Use Single Sign-On with Clientless SSL VPN documentation in the Cisco ASA Series VPN CLI Configuration Guide. Prior versions of ASA firmware and An圜onnect do not support SAML login or use a different browser experience. Minimum Supported ASA and An圜onnect VersionsĬisco ASA SSO requires ASA version of 9.7.1.24, 9.8.2.28, 9.9.2.1, or higher of these releases, or 9.10 and later, plus An圜onnect 4.6 or later. Primary and Duo secondary authentication occur at the identity provider, not at the ASA itself. This deployment option requires that you have a SAML 2.0 identity provider (IdP) in place that features Duo authentication, like Duo Single Sign-On. Overviewĭuo's SAML SSO for ASA supports inline self-service enrollment and the Duo Prompt for An圜onnect and web-based SSL VPN logins. Our cloud-hosted SSO identity provider offers inline user enrollment, self-service device management, and support for a variety of authentication methods - such as passkeys and security keys, Duo Push, or Verified Duo Push - in the Universal Prompt. Add two-factor authentication and flexible security policies to Cisco ASA An圜onnect SAML 2.0 logins with Duo Single-Sign On.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |