Anyconnect groups with Saml authentication Azure


Anyconnect groups with Saml authentication Azure

Hey all,


I have run into a problem moving from an ASA 5525 environment to MX, specifically Anyconnect VPN.  Currently the MX is working perfectly with saml and azure, but with the ASA solution we were able to create anyconnect "apps" in azure and apply users to the groups to restrict different access.  WIth the MX, I have not found a way to do that.  We have a lot of contractors and allowing full access to our network is not something I am willing to do.  


Has anyone out there successfully done something like this?  I keep reading that SAML groups are in the works but I see no evidence that its coming anytime soon.





Kind of a big deal
Kind of a big deal

The Anyconnect has some limitations on MX but I think that you can achieve it using Group policies.

Kind of a big deal
Kind of a big deal

I assume that the MX is not capable of this. Group-Policies can be applied, but I am only aware of doing this with RADIUS. And other that with the ASA, the is no secondary authorisation on the MX that can apply authorization after the SAML authentication.

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.