0

Several users after logging in are redirected to the ASA AnyConnect download section instead of connecting to the VPN.

We try to log in via Web or AnyConnect application by using SAML Identity Provider - simplesamlphp (users data are located in the Active Directory).

[saml] webvpn_login_primary_username: SAML assertion validation succeeded
[saml] webvpn_aaa_callback: Process SAML response.
[saml] emweb_string: SAML_BYPASS_GROUP_BUFFER is empty.
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: SAML hash table cleanup periodic task
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: SAML hash table cleanup periodic task
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: SAML hash table cleanup periodic task
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: authentication pending
SAML AUTH: SAML hash table cleanup periodic task

I think that authentication is interrupted by a timeout. Why does the login process work correctly for some users and for other users the Cisco AnyConnect download section is displayed rather than connecting to the VPN? What could we do to debug this better to get more information about what happened?

1
  • 1
    You need to provide a sanitized output of your running config. We can't guess at what you've done.
    – Jesse P.
    Nov 17 '20 at 17:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.