Authentication flow using Secure Client, Entra ID and Access Manage

[MauroF]

Hi,

I would like to authenticate:

• external suppliers

• connecting via Cisco Secure Client (AnyConnect)

• authenticating against Entra ID

• using Access Manager as the NAC solution

In short, the idea is the following:
using the existing AnyConnect client, users connect to the vMX, and through Access Manager policies, the authentication request is forwarded to Entra ID.

Is this scenario supported and technically feasible?

M.

[alemabrahao]

It cannot receive a SAML request from the MX and forward it to Entra ID. Access Manager is not designed to authenticate VPN connections Its purpose is enforcing identity-based rules for network edges (switch/AP), not VPN hubs.