Login

Cisco Security Cloud Control Administration Guide

About Cisco Security Cloud Control
- Products Managed by Cisco Security Cloud Control
Platform Services for all Products
- Manage Security Devices
- Manage Objects
- Global Search
  - Initiate Full Indexing
  - Perform a Global Search
- Preview and Deploy Configuration Changes for All Devices
- Additional Configuration Assistance
- Integrate Identity Services Engine with Security Cloud Control
- Organization Notification Settings
- Security Cloud Control Platform Navigator
- Give us your Feedback
Managing Organizations
- Setting a Region for an Organization
- Create an Organization
- Rename an organization
- Switch organizations
- Cisco Support Access to your Organization
  - Enable Cisco Support Access
  - Disable support access
Managing Products and Subscriptions
- Overview of Subscription Process
- Single Product Instance in an Organization
- Claim a Subscription
- Activate a Product Instance
  - Activate an Inactive Product Instance
  - Activate an Externally Managed Product Instance
  - Activation Code to Activate Externally Managed Product Instance
  - Activate a Product Instance with Further Inputs
- View Product Subscription Details
- Deactivate a Product Instance
Onboard Devices to Security Cloud Control
- Secure ASA Onboarding Methods
- Secure Firewall Threat Defense Onboarding Methods
- On-Premises Firewall Management Center Onboarding Methods
- Meraki Security Appliance Onboarding Methods
- Cisco IOS Device Onboarding Methods
- Secure Firewall Chassis Manager Onboarding Methods
- AWS Virtual Private Cloud Onboarding Methods
- Cisco Umbrella Organization Onboarding Methods
Managing Role-Based Access Control
- Role-Based Access Control in an Organization
  - Managing Users
  - Managing Groups
  - Managing Roles
- Invite a User
- Import Users
- View or Find Users
- Edit a User Name
- Assign Roles to a User
- Add a User to Groups
- Assign Roles to Existing Users
- Remove Role Assignments
- Create a Custom Role
- Edit a Custom Role
- Delete a Custom Role
- Custom Role for Cisco Secure Workload
- Reset Multifactor Authentication Settings
- Reset User Password
- Disable a User Account
- Restore a User Account
- Remove a User Account
- Create a New Group
- Edit a Group Name
- Add Users to a Group
- Assign Roles to Groups
- Remove users from a group
- Delete a Group
- Manage Role Delegation
- Logging the Events
  - View the Activity Log
Managing Domains
- Overview
- Claim and verify a domain
Managing Identity Provider Group Mapping
- Identity Provider Group Map
- Map Identity Provider Group
- Edit an identity provider group mapping
- Link an External Identity Provider
- Delink an External Identity Provider
Integrating Identity Providers
- Prerequisites
- SAML Response Requirements
- Step 1: Initial setup
- Step 2: Provide Security Cloud SAML metadata to your identity provider
- Step 3: Provide SAML metadata from your IdP to Security Cloud
- Step 4: Test your SAML integration
- Step 5: Activate the integration
- Troubleshooting SAML errors
Identity Service Provider Instructions
- Integrating Auth0 with Security Cloud Sign On
- Integrating Microsoft Entra ID with Security Cloud Sign On
- Integrating Duo with Security Cloud Sign On
- Integrating Google Identity with Security Cloud Sign On
- Integrating Okta with Security Cloud Sign On
- Integrating Ping Identity with Security Cloud Sign On

Platform Secure Firewall Threat Defense Virtual

Activity Manage

Managing Products and Subscriptions Single Product Instance in an Organization

Last updated: Jul 17, 2025

Single Product Instance in an Organization

A Security Cloud Control organization supports only one active instance of a given product.

An organization centralizes the management of all licensed products, and any underlying platform services or product-included services. The support for only one active instance of a given product provides a unified experience in managing the products and their services. This restriction of one instance per product ensures effective communication across the products and their associated services within the organization and provides enhanced security within a specified product domain. The products can communicate accurately, operate efficiently, and work together as a cohesive solution.

Guidelines for Activating a Product Instance

Because an organization allows you to activate only one instance of a product, note the guidelines in the following scenarios:

Product on a trial license: When you attempt to activate a paid subscription for a product that operates on a trial license, you have the option to apply the paid subscription on the trial license. If you choose to do so, the trial license for the product instance is replaced with the paid license, ending the trial. If you choose not to apply the paid subscription on the trial license, claim the product subscription in a separate organization.
Active product instance (paid subscription): You can’t claim an additional subscription for a product that has an active instance in an organization.

When you attempt to claim a subscription that contains a license for a product which is already active in the organization, Security Cloud Control blocks the claim process. For example, if your organization has an active Cisco XDR instance from a paid subscription and you attempt to claim an additional paid subscription that includes Cisco XDR, the claim process is blocked. In such a case, claim the subscription in a separate organization or create a new organization to claim the subscription.
External or inactive instance: When you attempt to claim a paid subscription for a product in an organization that has an external inactive instance of the same product attached to it, Security Cloud Control provides you with an option to apply the subscription license to this external instance. If you choose to do so, the claim process applies the subscription to the external instance that is attached to the organization. If you choose not to, you can apply the license to a new instance.

To delete or move an external instance of a product, contact Cisco Technical Assistance.

Previous topic Overview of Subscription Process Next topic Claim a Subscription