Cisco AnyConnect Auto Login

[BaronCSE]

Hi Everyone,

We just deployed AnyConnect Beta with RADIUS authentication. As of now everything is smooth from admin side but we also want the users to have seamless experience when using Anyconnect.

Our problem boils down to "Auto Login" when users start to use Anyconnect they should not be asked log-in credentials time to time. 

Does anyone have a solution for this or other techniques we can explore?

Note: I've already check the CA based auth, but it seems Meraki doesn't support one time log-in.

[PhilipDAth]

Configure RADIUS to use certificate-based login.

[BaronCSE]

Hey Philip,

I checked that one out, it will still require log-in credentials even they have CA.

[Inderdeep]

@BaronCSE : You can check all details in below link 

https://documentation.meraki.com/MX/AnyConnect_on_the_MX_Appliance/Authentication

[BaronCSE]

Hi Inderdeep,

I already check the docs. They don't support the Auto Log-in.

[molan]

@BaronCSE did you ever find a solution to saving the user credentials for auto logon so users are not constantly prompted?

[CptnCrnch]

There is no solution, at least not using user credentials. If you really want auto logon, just go the certificate based authentication route.

[molan]

I am fine with certs if that is the answer, but it appears enabling certs in the Meraki doesn't remove the need for the users to enter credentials

[molan]

https://documentation.meraki.com/MX/AnyConnect_on_the_MX_Appliance/Authentication#Certificate-based_...

 

Please note that AnyConnect on the MX does not support certificate-only authentication at this time. Authenticating users must input credentials once certificate authentication succeeds. If certificate authentication fails, the AnyConnect client will report certificate validation failure.  

is this incorrect?  because it looks like certificates don't solve the issue

[BaronCSE]

No solutions yet. Even with cert auth they still need to input their creds.

[rehnquist]

This is a problem, I'm working on a new vMX deployment for client VPN and we need this. Is there still no workaround?

[PhilipDAth]

There is no work around.

[BaronCSE]

I found an interesting way. Use SAML, you will need to call Meraki support to enable SAML on the dashboard.