Could have been firmware related. In 16.16.2+ and 17.7+ firmware versions a change was made to set the  Forceauthn=  value to  true  in the SAML request sent by the MX to the Identity Provider. This means that each time a user tries to re-authenticate, user credentials will be required. Prior to this change users were able to disconnect and reconnect to the VPN without credentials within a given time - if the user's auth token was considered still valid by the Identity Provider. ... View more

Hi Everyone,   Thank you very much for the feedback. This is a valid feature request. We have been working on some improvements to MX ports section. I will really like to discuss over WebEx if possible with anyone on this thread. I will like to ask a few questions to help guide our team as continue to improve the Meraki MX platform. Please feel free to send me a direct message.   Thanks again.     [MOD NOTE: Marking this as the solution for greater visibility, NOT to indicate that the issue is solved. Cheers!] ... View more