Share via

Cisco Anyconnect : SAML Force select account during AAD login

LoicM 1 Reputation point
2020-10-29T12:35:50.733+00:00

Hello,

We have switched from RSA to MFA for authentication on Cisco Anyconnect using Enterprise application and Azure AD SSO (https://learn.microsoft.com/fr-fr/azure/active-directory/saas-apps/cisco-anyconnect ) we added conditional access to require MFA on those apps.

We have issue with external partners that have auto acceleration setup:
When those users try to connect they are not requested to enter/select the login they want to use and got denied because they try to use there B2B identity.

Is it possible to pass in the saml request a force authenticate or prompt select account ?

Thank you very much for assistance.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,452 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. James Hamil 24,481 Reputation points Microsoft Employee
    2020-10-29T19:56:23.803+00:00

    Hi! It looks like you need to set up Home Realm Discovery. Make sure you set 

    -EnableGuestSignInAcceleration $true

    Hope this helps!

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.