Secure Access Onboarding Workflow

The Get Started with Cisco Secure Access workflow guides you through the initial setup of Secure Access.

Sign in to Secure Access and navigate to Workflows. The first step in the Get Started workflow takes you through the setup of your organization's network connections—network tunnel groups and network tunnels. At the same time, you can provision users and groups from your organization in Secure Access and set up integrations with Security Assertion Markup Language (SAML) identity providers (IdPs).

After you establish network connections, begin the Secure resources and access step in the workflow that includes:

• designing endpoint posture profiles
• IPS and security profiles
• policy rules

Then, in the Configure end user connectivity step, define traffic patterns for remote user connections to resources—configure DNS servers, Zero Trust, virtual private networks (VPNs), and internet security settings.

As an administrator, review and audit connections and traffic events in the Secure Access logs and reports. Start with the Secure Access Overview Dashboard. For more information, see Secure Access Overview Dashboard.

• Step 1 – Configure Network Connections
• Step 2 – Configure Access to Resources
• Step 3 – Configure End User Connectivity
• Step 4 – Configure Endpoints and Network Sources

The Get Started with Cisco Secure Access workflow guides you through the tasks in the Configure Infrastructure step—configure Resource Connector Groups and Resource Connectors, and configure Network Tunnel Groups and establish network tunnels to Secure Access. After you complete the network connections deployment steps, provision users and groups from your organization in Secure Access and configure integrations with SAML identity providers (IdPs). For more information, see Manage Network Connections.

Provision users and groups from your organization in Secure Access. You can configure users and groups though integrations with identity providers (IdPs) or by manually importing a list of users and groups from a comma-separated values (CSV) file. Once you provision users, you can configure and manage users in profiles that secure and route traffic from user devices. For more information, see Manage Users, Groups and Endpoint Devices.

• Import Users and Groups from CSV File
• Provision Users and Groups from Okta
• Provision Users and Groups from Microsoft Entra ID
• Provision Users and Groups from Active Directory

Integrate SAML identity providers (IdPs) and users in your organization in Secure Access. For more information, see Configure Integrations with SAML Identity Providers.

• Configure Azure AD for SAML
• Configure Okta for SAML
• Configure AD FS for SAML
• Configure Duo Security for SAML
• Configure PingID for SAML
• Configure OpenAM for SAML

The Get Started with Secure Access workflow guides you through the tasks in the Secure Resources and Access step—secure your private resources, enable access controls on resources, and create policy rules. For more information, see Manage Private Resources.

Configure access to private resources for your users. Private resources are private subnets (IPv4 routes) and applications deployed and managed by your organization.

• Manage Private Resources

Set up Secure Access rule defaults and global settings to access private resources.

Configure and add rules to the Secure Access policy.

• Manage the Access Policy

The Get Started with Secure Access workflow guides you through the tasks in the Configure End User Connectivity step—configure DNS servers, internet security, virtual private networks (VPNs), and Zero Trust (ZT) access for user devices.

The Get Started with Secure Access workflow guides you through the tasks in the What's Next step—configure your organization's user devices, add registered and internal networks to Secure Access, and configure IPS and endpoint posture profiles in policy rules.