Integrate subscriptions and product instances using an activation code

Login

Cisco Security Cloud Control Administration Guide

Overview of Security Cloud Control
Platform Services for all Products
- Manage security devices
- Services UI
  - Reference for enabling Cisco products
- Global search
  - Initiate full indexing
  - Perform a global search
- Preview and deploy configuration changes for all devices
- In-Product Announcements
- Talos Intelligence
- Additional Feature and Configuration Suggestions
- Integrate Identity Services Engine with Security Cloud Control
- Organization Notification Settings
- Use the Security Cloud Control Firewall Management platform navigator
- Set Background Theme
- Give us your Feedback
Organizations
- Create an organization
- Setting a region for the organization
- View Organization Details
- Rename an organization
- Switch Organizations
Subscriptions and Services
- About subscriptions and services
  - Subscription and service types
  - Claim code email for subscriptions
  - How trial subscriptions work
  - Subscription expiration grace period
  - Local data residency platform support
    - Claim LDR subscription
- Claim a paid or trial subscription
  - Claim a subscription for a new instance
  - Stack a trial subscription on an existing instance
  - Claim a subscription for an inactive instance
  - Claim a subscription for an externally managed instance
  - Replace a subscription
  - Enable a platform-enabled service
- Manage subscriptions and services
  - Transfer a subscription
  - Deactivate a product instance
  - Migrate existing subscriptions and product instances to an organization
    - Integrate subscriptions and product instances using an activation code
- View product subscription details
Administrator Access
- Administrator Access in an Organization
  - Managing Users
  - Managing Groups
  - Managing Roles
- Invite a User
- Import Users
- View or Find Users
- Reinvite a User
- Edit a User Name
- Assign Roles to a User
- Add a User to Groups
- Assign Roles to Existing Users
- Remove Role Assignments
- Create a Custom Role
- Edit a Custom Role
- Delete a Custom Role
- Custom Role for Cisco Secure Workload
- Reset Multifactor Authentication Settings
- Reset User Password
- Disable a User Account
- Restore a User Account
- Remove a User Account
- Create a New Group
- Edit a Group Name
- Add Users to a Group
- Assign Roles to Groups
- Remove users from a group
- Delete a Group
- Manage Role Delegation
Domains
- Domains Overview
- Claim and verify a domain
Common Objects and Object Groups
- Common Objects
  - Key characteristics of common objects
- Common Object Groups
  - Key characteristics of object groups
  - Objects that can be combined in an object group
- Supported types of common objects
- Object naming requirements
- Object limits within an organization
- Common object store
  - Search, filter, and view common objects
- Create a Secure Access Network Object
- Create a network object common to SD-WAN and Secure Access
- Edit an SD-WAN or Secure Access Common Network Object
- Edit an object group in use by Secure Access and SD-WAN
- Create a network object group
- Delete a common object or object group
- Object Issue Resolution
  - Resolve single object naming issues
  - Resolve object naming issues in bulk
  - Resolve single object local validation issues: Tunnel object error
  - Resolve Host Bits Set in Single Network Object
  - When group objects from Secure Access are incompatible with SD-WAN
  - Deleting object from expired SD-WAN
Identity Provider Group Mapping
- Identity provider group map
- Map identity provider group
- Edit an identity provider group mapping
- Link an external identity provider
- Delink an external identity provider
Integrate Identity Providers
- Prerequisites
- SAML response requirements
- Step 1: Initial setup
- Step 2: Provide Security Cloud Control SAML metadata to your identity provider
- Step 3: Provide SAML metadata from your IdP to Security Cloud
- Step 4: Test your SAML integration
- Step 5: Activate the integration
- Troubleshooting SAML errors
Configure Multiple Identity Providers
- About multiple identity providers
- Configure the Security Assertion Markup Language (SAML)
- Add and verify domains for new organizations
- Add routing rules
  - Edit routing rules
  - Deactivate and delete routing rules
- Configure OpenID Connect
- Create routing groups
- Create a self-recovery account
Identity Service Provider Instructions
- Integrating Auth0 with Security Cloud Sign On
- Integrating Microsoft Entra ID with Security Cloud Sign On
- Integrating Duo with Security Cloud Sign On
- Integrating Google Identity with Security Cloud Sign On
- Integrating Okta with Security Cloud Sign On
- Integrating Ping Identity with Security Cloud Sign On
Activity Log
- View and export events in the activity log
SASE Management
- Configure and onboard SASE
- Enable SASE Management for existing Secure Access customers
- Enable SASE Management for existing Secure Access customers with SD-WAN
- Cancel SASE Enablement if SD-WAN Onboarding Fails
- Re-enable SASE management
- Enter Activation Code to Onboard SD-WAN
- Object Migration for Existing Secure Access Accounts
- SASE role upgrade for SCC-managed Secure Access RBAC
  - SASE management user roles
  - User roles in Security Service Edge, SD-WAN, and Secure Access Service Edge
Security Cloud Control API Keys
- About Security Cloud Control API Keys
- Generate an API Key with Network Restrictions
- View API Key Details
- Disable an API Key
- Re-enable a Disabled API Key
- Delete an API Key
- Refresh Access Token
Frequently Asked Questions
- General FAQs
- Security Cloud Sign On FAQs
- Switching from Google Authenticator to Duo MFA FAQs
- Provisioning FAQs
- Administrator access FAQs
- Identity provider and multi tenancy FAQs
Additional Documentation and Support
- Security Cloud Control Documentation
- AI Defense Documentation
- Security Cloud Control Firewall Management Documentation
- Multicloud Defense Documentation
- SASE Management with Common Objects
- Secure Access Documentation
- Secure Workload Documentation
- Browsers Supported by Security Cloud Control
Cisco Customer Support
- Cisco Technical Assistance Center (TAC)
- Cisco Support Access to your Organization
  - Manage Cisco Support Access

Subscriptions and Services Manage subscriptions and services Migrate existing subscriptions and product instances to an organization Integrate subscriptions and product instances using an activation code

Last updated: Oct 12, 2026

Previous topic Migrate existing subscriptions and product instances to an organization Next topic View product subscription details