Duo Security offers a variety of methods for adding two-factor authentication and flexible security policies to SSO logins for Cisco ASA VPN and AnyConnect, complete with inline self-service enrollment and Duo Prompt.
This video explains how to protect Cisco ASA SSO logins using Duo’s on-premises SSO product, Duo Access Gateway. It describes some of the necessary prerequisites for this configuration and then shows the setup process.
Learn more about this configuration at https://www.duo.com/docs/ciscoasa-sso. Learn more about Duo Access Gateway at https://www.duo.com/docs/dag.