MFA on ASA VPN for Specific Groups Skip to main content
https://support.okta.com/help/answers?id=906f0000000i0wtia0&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fanswers
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Ask Search:
Ben2 SpeckienBen2 Speckien 

MFA on ASA VPN for Specific Groups

Hello,

I am wondering how to deploy MFA for certian AD groups on a Cisco ASA VPN.  I can currently apply it for everyone but not for specific groups.  Is this even possible? 
Best Answer chosen by Niki (Okta, Inc.) 
Eric KarlinskyEric Karlinsky (Okta, Inc.)
Hey Ben - This is covered in the Authorization section of the ASA Configuration Guide: https://support.okta.com/help/articles/Knowledge_Article/Cisco-ASA-VPN-Configuration-Guide#Authorization. Okta cannot leverage groups via the RADIUS protocol today, so an integration with LDAP as an authroization provider is required.