Meraki AnyConnect + Azure AD SAML RBAC Options

[ToryDav]

Hi!

Is it possible to create some type of RBAC using group policy or SAML (Azure AD) for an Anyconnect user?

Ideally giving them a specific VLAN when they connect based on a level of access would be fine, or somehow applying a group policy that contains an L3 firewall override?

How do others do this in the field? ISE?

[Rimccart]

Hi ToryDav, 

The MX appliances do not support multiple VLANs for client VPN and Any Connect clients. We do have the ability to assign group policies to client VPN users however that can make them subject to a different set of firewall rules. 

I'd advise reviewing the following documentation:

https://documentation.meraki.com/MX/Client_VPN/AnyConnect_on_the_MX_Appliance#Group_Policies