Add User Authentication Integrations

After you add an IdP to provision users and groups in Cisco Secure Access, configure the integration of a single sign-on (SSO) authentication identity provider (IdP).

Secure Access uses Security Assertion Markup Language (SAML) to authenticate and authorize web requests through the Secure Web Gateway (SWG) for users on networks and network tunnels. Also, Secure Access authenticates user connections with Zero Trust Access to private destinations.

To support SAML authentication and authorization, you must configure the integration of an SAML identity provider (IdP) in Secure Access.

This guide describes the steps to begin the integration of an SAML IdP in Secure Access. Complete the integration by following one of the SAML IdP configuration guides.

Table of Contents

• Prerequisites
• Procedure
• View SAML IdP Integrations

Prerequisites

• Full Admin user role. For more information, see Manage Accounts.

Procedure

Add an SSO authentication IdP in Secure Access.

1. Navigate to Connect > Users and User Groups, and then click Configuration Management.

2. Navigate to SSO authentication, and then click +Add.

   

3. For Authentication Method, click Security Assertion Markup Language (SAML).

   

4. Click Next.

5. Choose the type of SAML IdP and follow the steps to complete the configuration. For more information, see Configure Integrations with SAML Identity Providers.

View SAML IdP Integrations

1. Navigate to Connect > Users and User Groups, and then click Configuration Management.
2. Navigate to SSO authentication, and then expand an integrated SSO IdP.

Manage User Authentication > Add User Authentication Integrations < Manage IP Surrogates for SSO Authentication