About Single Sign-On for Users

When a user connects to a destination through the Cisco Secure Access Secure Web Gateway (SWG) or with Zero Trust Access, Secure Access presents a sign-in dialog window.

Secure Access requests that the user enter their single sign-on (SSO) credentials in the dialog window. After Secure Access validates the user's credentials, the user is connected to the destination.

Table of Contents

Sign-On for Provisioned Users

An administrator provisions the organization's users and groups in the Secure Access and adds a user authentication profile in Secure Access.

Scenario

A user attempts to connect to a web destination that is protected by the Secure Access Secure Web Gateway (SWG) or connects to a private destination through Secure Access Zero Trust Access.

Sample Sign-On Window

Secure Access presents a SSO dialog window that requires the provisioned user to enter their SSO credentials.


Sign-On for Non-Provisioned Users

A user is not provisioned in the Secure Access organization through an identity provider (IdP) or other method.

Scenario

A user attempts to connect to a web destination that is protected by the Secure Access Secure Web Gateway (SWG) or connects to a private destination through Secure Access Zero Trust Access.

Sample Sign-On Window

Secure Access presents a dialog window. The user must:

  • Choose a user directory for a configured provisioning profile.
  • Enter their SSO credentials to sign into Secure Access.

Add User Authentication Profiles < About Single Sign-On for Users > Edit User Authentication Profile