How to enable Cisco AnyConnect VPN SSO for FirePower and Cisco ISE

Objective: To configure single sign-on for Firepower and Cisco ISE for privileged users.

Follow these steps to enable single sign on for firepower and Cisco ISE:

• Open the Firepower Management Center.
• Navigate to Objects > Object Management > RADIUS Server Group Configuration.
• Select the "Enable Authorize Only" checkbox.

Ensure the CN (common name) of the user's certificate in FMC has all the usernames of privileged users and this will be sent to AD servers for comparison to enable authentication.This way the privileged users can simply obtain VPN connection and access Firepower and Cisco ISE without providing additional set of credentials.

Note:

In Firepower, don't enable Only Certificate Authentication on Firepower RA VPN Configuration in order to check posture of connections.