Meraki

Community
  • About AlanAtNgāTaonga

About AlanAtNgāTaonga

Re: AnyConnect SSO to Entra (Azure AD)

by in Security & SD-WAN
‎Jul 14 2025 2:31 PM
2 Kudos
‎Jul 14 2025 2:31 PM
2 Kudos
Kia ora SG   Yes, that's working very well at our site, that the AnyConnect/Meraki VPN uses the Entra user credentials and security groups and 2FA for authentication.   Yes, I think that uses SAML.   There's: configuration required on the Meraki VPN server configuration required in Entra a support request to the Cisco/Meraki support as detailed earlier in this thread   Regards Alan   ... View more

Re: AnyConnect VPN SSO

by in Security & SD-WAN
‎Oct 3 2024 3:35 PM
7 Kudos
‎Oct 3 2024 3:35 PM
7 Kudos
Hi TEAM-ind   > > If you use SAML for authentication, it can be cached   > How can I turn on the caching of credentials?   This is what I was told: "This is a back-end Meraki setting that you will have no visibility of and need to ask Meraki support to set."   That doesn't sound very promising, but that's exactly what I did, requesting that configuration change via the Meraki support channel, and now it works perfectly. Connects every time, without needing to enter credentials.   I hope that helps.   Manaakitanga! Alan     ... View more

Re: AnyConnect SSO to Entra (Azure AD)

by in Security & SD-WAN
‎Feb 25 2024 3:39 PM
3 Kudos
‎Feb 25 2024 3:39 PM
3 Kudos
Hi Phil   That worked an absolute charm. Seems almost too good to be true! Now, if I log in to Windows with my MS365 ID, I can connect the AnyConnect VPN without any further authentication required.    I'd up the kudos points by 100 if I could, but it'll only register one!   Thanks very much. I know where to come now if I need a Cisco consultant in New Zealand! ... View more

Re: AnyConnect VPN SSO

by in Security & SD-WAN
‎Feb 22 2024 3:18 PM
1 Kudo
‎Feb 22 2024 3:18 PM
1 Kudo
Kia ora Philip   We've talked a bit already on this subject. Thanks very much for your helpfulness.   Here's where I'm at now: https://community.meraki.com/t5/Security-SD-WAN/AnyConnect-SSO-to-Entra-Azure-AD/m-p/226242   > If you use SAML for authentication, it can be cached   How can I turn on the caching of credentials? It's not happening now, although the SAML connection does work fine when the user types in their credentials.   Thanks and regards ... View more

AnyConnect SSO to Entra (Azure AD)

by in Security & SD-WAN
‎Feb 22 2024 2:58 PM
‎Feb 22 2024 2:58 PM
Hi, I'm setting up remote worker VPN on some Windows laptops that are joined to Entra (Azure AD). We're using the AnyConnect app to connect to a MX75 'VPN server'.   The SAML connection is working, but I want something more like SSO. Is that possible using the AnyConnect client app?   Users can successfully use the AnyConnect app to connect to our MX75 using their Entra (Azure AD) credentials, but they have to type in their Azure AD username and password. Is it possible to set things up so that they don't need to type in their username? That the AnyConnect app 'gets that from the system' somehow?   This topic from 2018 suggests that this isn't possible. I'm hoping that feature has been added since then. https://community.cisco.com/t5/vpn/single-sign-on-with-anyconnect/td-p/3738521   Thanks and regards Alan ... View more
Labels:
© 2025 Cisco Systems, Inc.