Cisco AnyConnect Client SMS MFA

[DTheMan]

Hello Everyone,

I am setting up Cisco AnyConnect with our MX250. For the authentication and MFA I am using radius server.  I could login to Cisco AnyConnect using MFA App and Calling feature but I can't connect to AnyConnect using SMS feature. On my phone I receive txt but on anyconnect client I don't get a pop-up to enter the passcode. 

does anyone know if SMS authentication is supported? 

[CptnCrnch]

Get in contact with suport to have them prolong the MFA timeout. Afterwards, everything should be fine.

[DTheMan]

I already extended MFA timeout to 180 seconds on MX250. 

• Microsoft Authenticator app ( works)
• Voice Call ( works )
• SMS  I receive text message on my phone but CiscoAnyConnect Client on Meraki doesn't pop-up box to enter the passcode. On the CiscoAnyConnect client you get login error.

[PhilipDAth]

It doesn't support secondary authentication in that way on MX when using RADIUS.

It will work if you change to using SAML authentication.

https://documentation.meraki.com/MX/AnyConnect_on_the_MX_Appliance/Authentication