User Provisioning - Entra ID for Secure Access

Welcome to today's session on Cisco Secure Access, focusing on user provisioning with intra ID as our IDP, we will explore the essentials of this integration. On today's agenda, we have three key topics. 1st, we'll provide a.00:04An overview of user provisioning. Next, we'll cover the prerequisites necessary to set up and validate the service. Finally, we will demonstrate these concepts in action through a practical demo. Let's proceed with our 1st section.00:20Cisco Secure Access supports the integration with identity providers to provision users and groups through to deliver comprehensive visibility into internet traffic while streamlining authentication and enrollment for both VPN as a service and zero trust access ZTA. By leveraging these identities, you can build granular access policies that permit or deny.00:34Traffic to specific public or private destinations. Entry ID remains your single source of truth. Users and groups are managed in one place and synced to secure access through a native app from the entry gallery. This help accelerates onboarding by connecting secure access to the identity data you already have. Users and groups are available for policy within minutes of setup.00:54Prerequisites before we begin, let's review the critical prerequisites. User provisioning needs admin access on both sides of the integration. In this segment, we will put these concepts into practice. We'll walk through the configuration steps necessary to complete your user provisioning with secure access.01:15Log into secure access. Navigate to connect, Users, groups, and endpoint devices. Click on configuration management. Click on integrate directories. Select Identity Provider as the provisioning method.01:35Give the integration a name under IDP directory name, any name that's meaningful to you, then choose ENTRAID from the choose identity provider dropdown. Click generate token, then copy both the token and the URL. Save them somewhere safe since the token is only shown once and you'll need both values on the entra ID side.01:54Log into your entra ID tenant, go to Enterprise Apps, and click new application. Search for Cisco user management for secure access. Select the app and click create. Once the app is created, go to users and groups and click plus add user/group. This is where you choose.02:16Which users and groups will be provisioned to secure access?02:36Next, go to provisioning. Click on new configuration. Enter the URL and token we generated earlier in secure access. Click test connection to confirm enter ID can reach secure access, then click create.02:41Click start provisioning. Depending on how many users and groups you're syncing, this can take anywhere from a few minutes to a few hours for large directories. After a few minutes, confirm the users show up in secure access. In our lab, we're syncing a single test user called user one. If NO users appear, check the provisioning logs in.02:59To entraid. That concludes our walkthrough on user provisioning using entra ID. Thank you for watching.03:19