configure asa anyconnect vpn azure mfa saml

INFO: Import PKCS12 operation completed successfullyĬiscoasa(config-webvpn)# saml idp Import the ASA signing PKCS12 into a trustpoint:Ĭiscoasa(config)# crypto ca import asa_saml_sp pkcs12 Įnter the base 64 encoded pkcs12. Openssl base64 -in certificate.p12 -out certificate.base64

Openssl pkcs12 -inkey key.pem -in certificate.crt -export -out certificate.p12 Openssl req -newkey rsa:2048 -nodes -keyout key.pem -x509 -days 365 -out certificate.crt If you do not have signing PKCS12 certificate, you need to generate it using the following openssl commands: INFO: Certificate has the following attributes:ĭo you accept this certificate? : yes Sign into the Okta Admin Dashboard to generate this variable. Import the OKTA’s signing certificate into a trustpoint:Ĭiscoasa(config)# crypto ca trustpoint oktaĬiscoasa(config-ca-trustpoint)# enrollment terminalĬiscoasa(config-ca-trustpoint)# no ca-checkĬiscoasa(config-ca-trustpoint)# crypto ca authenticate oktaĮnter the base 64 encoded CA certificate:Įnd with the word quit on a line by itself: Type the following commands in order to access config terminal: The Okta/Cisco ASA VPN SAML integration currently supports the following features:įor more information on the listed features, visit the Okta Glossary. Please use the Okta Administrator Dashboard to add an application and view the values that are specific for your organization.

This setup might fail without parameter values that are customized for your organization.

Configure asa anyconnect vpn azure mfa saml