Prerequisites for SAML SSO

Review these prerequisites before configuring SAML SSO authentication and authorization for remote access VPN.

  • Create an account with your IdP.

  • Obtain these from your IdP:

    • IdP Entity ID URL

    • Sign-in URL

    • Sign-out URL

    • IdP certificate

  • If you use Duo, download and install Duo Access Gateway.

  • Create a SAML single sign-on server object (Objects > AAA Server > Single Sign-on Server).

    Note

    You can also create a single sign-on server object in the Connection Profile settings when you create a new remote access VPN policy using the wizard.