https://www.dannoprojects.com/tags/microsoft-entra-id/Recent content in Microsoft Entra ID on Danno ProjectsHugo -- gohugo.ioenTue, 12 Aug 2025 00:00:00 -0800https://www.dannoprojects.com/posts/networking/cisco-firepower-saml-mfa/Tue, 12 Aug 2025 00:00:00 -0800https://www.dannoprojects.com/posts/networking/cisco-firepower-saml-mfa/<h2 id="overview">Overview</h2> <p>Setting up SAML authentication with MFA on a Cisco Firepower 1120 for VPN access is essential for modern security requirements. Microsoft&rsquo;s documentation provides a good starting point, but it&rsquo;s missing critical CLI configuration commands for the Firepower side.</p> <p>This guide fills in those gaps and documents the lessons learned during implementation.</p> <h2 id="prerequisites">Prerequisites</h2> <ul> <li>Cisco Firepower 1120 with appropriate licensing and AnyConnect</li> <li>Microsoft Entra ID tenant with administrative access</li> <li>Access to Firepower via ASDM or CLI</li> <li>Your Firepower VPN&rsquo;s public FQDN and SSL certificate configured</li> </ul> <h2 id="configuration-steps">Configuration Steps</h2> <h3 id="step-1-create-the-enterprise-application-in-azure">Step 1: Create the Enterprise Application in Azure</h3> <p>Follow Microsoft&rsquo;s guide to create the Cisco Secure Firewall app in Microsoft Entra ID:</p>