SAML integration - Entra ID for Secure Access

Welcome to today's session on Cisco Secure Access, focusing on SAML integration with entraid as our identity provider IDP. Today, we will delve into the core aspects of this integration and its importance in connecting your IDP with Cisco Secure Access.00:04Our agenda today includes three main topics. 1st, we will provide an overview of SAML integration. Next, we will discuss the prerequisites necessary for setting up and validating the service. Finally, we will demonstrate these concepts in action through a practical demo. Let's start with the 1st section.00:21Cisco Secure Access is designed to secure your organization's digital environment by offering a unified access point for internet, cloud, and on premises resources. By integrating with the SAML identity providers like Okta, intra ID or Duo, it enables a seamless single sign on experience for remote users. This integration supports zero trust.00:40Host access ZTA enrollment and provides visibility into users web traffic for identities connected via an IPsec tunnel to secure access. This approach ensures simplicity and efficiency across your environment.00:59Before proceeding, let's review the critical prerequisites. Firstly, user provisioning must be completed. Your IDP should have already provisioned users to secure access for ZTA enrollment or authentication via an IPsec tunnel. Secondly, you need administrative access to enter ID to configure necessary settings. Lastly, administrative access to.01:13Cisco secure access is required to complete the integration process.01:33In this segment, we will apply the concepts discussed so far. I will guide you through the configuration steps necessary for integrating your SAML identity provider, specifically entra ID with secure access. To begin, log into your entra ID portal, add a new enterprise application by selecting Create your own application.01:39Name your application, select the non gallery option, and click create.01:59Next, click on users and groups in the application settings. Here, you will assign the users or groups authorized to authenticate with entra ID. Now, click on single sign on settings. Define your identifier, entity ID, and reply URL as specified in the interface. These values are also available in our.02:05Documentation. Once inputted, click save.02:25Download the federation metadata XML file from the SAM certificate section. This XML file will be uploaded to secure access in our next steps. Log into Secure Access and navigate to connect. From there, click on Users, groups, and endpoint devices to proceed with the integration process.02:30Here we can see that user provisioning has already been completed using entra ID as required in our prerequisites. Typically, the same identity provider or IDP is utilized for both provisioning and single sign on authentication. Although it is possible to use different IDPs for these functions. To begin configuring, click on configuration management. This will.02:50To take us to the next step in streamlining access management across your organization's digital resources.03:10Now, let's navigate to the SSO authentication section. Here, we will configure a new directory SSO. This step is crucial for establishing a connection between your identity provider and Cisco secure access, ensuring that users can seamlessly authenticate using their enterprise credentials.03:17In this step, you'll assign a name to your SSO authentication profile. Choose SAML assertion markup language SAML as your authentication method. It's important to note that while user directories might differ, in our setup, we are authenticating users provisioned by entra ID through SAML. Once done, click next to proceed.03:35Here, we select entra ID as our identity provider. This selection is essential for ensuring the correct configuration of your SSO settings. After selecting the provider, click next to continue with the configuration process. This is a crucial step. Upload the XML file that we previously downloaded from entratra ID. This file can.03:56Obtains the metadata necessary for the configuration process, ensuring the correct upload will facilitate a seamless integration. Once completed, click done to finalize this stage.04:16With intra ID now configured as your IDP, we are ready to proceed. It's advisable to click on test configuration to verify the setup. Remember, the user undergoing this test must be both provisioned to secure access and assigned to the enterprise application we are configuring an entra ID. This ensures that the authentication process works as intended.04:27If the test configuration is successful, you will see it in the screen. That concludes our walkthrough on SAML integration using intra ID. Thank you for watching.04:48