Switch Organizations

Login

Cisco Security Cloud Control Administration Guide

Overview of Cisco Security Cloud Control
Platform Services for all Products
- Manage security devices
- Global Search
  - Initiate Full Indexing
  - Perform a Global Search
- Preview and deploy configuration changes for all devices
- In-Product Announcements
- Talos Intelligence
- Additional Feature and Configuration Suggestions
- Integrate Identity Services Engine with Security Cloud Control
- Organization Notification Settings
- Use the Security Cloud Control Firewall Management platform navigator
- Set Background Theme
- Give us your Feedback
Manage Organizations
- Create an organization
- Setting a region for the organization
- View Organization Details
- Rename an organization
- Switch Organizations
Manage Subscriptions and Products
- About subscriptions
  - How multiple subscriptions behave for a product instance
- Claim a subscription
- Replace a subscription
- Platform grace period
- How multiple subscriptions behave for a product instance
- Guidelines and restrictions for multiple subscriptions management
- Perform Additional Activation Steps
  - Activate an inactive product instance
  - Activate an externally managed product instance
  - Apply an activation code for an externally managed product instance
  - Activate a product instance with further inputs
- View product subscription details
- Transferring subscription and product instance in Security Cloud Control
  - Transfer a subscription
  - Subscription transfer
    - Guidelines of subscription transfer
    - Transfer a subscription
- Deactivate a product instance
- Tenants without a subscription
- Manage multiple entitlements (SKUs) in claiming, notifications, and the subscription UI
- Migrate existing subscriptions and product instances to an organization
  - Integrate subscriptions and product instances using an activation code
Manage Role-Based Access Control
- Role-Based Access Control in an Organization
  - Managing Users
  - Managing Groups
  - Managing Roles
- Invite a User
- Import Users
- View or Find Users
- Reinvite a User
- Edit a User Name
- Assign Roles to a User
- Add a User to Groups
- Assign Roles to Existing Users
- Remove Role Assignments
- Create a Custom Role
- Edit a Custom Role
- Delete a Custom Role
- Custom Role for Cisco Secure Workload
- Reset Multifactor Authentication Settings
- Reset User Password
- Disable a User Account
- Restore a User Account
- Remove a User Account
- Create a New Group
- Edit a Group Name
- Add Users to a Group
- Assign Roles to Groups
- Remove users from a group
- Delete a Group
- Manage Role Delegation
Manage Domains
- Domains Overview
- Claim and verify a domain
Common Objects and Object Groups
- Common Objects
  - Key characteristics of common objects
- Common Object Groups
  - Key characteristics of object groups
  - Objects that can be combined in an object group
- Supported types of common objects
- Object naming requirements
- Object limits within an organization
- Common object store
  - Search, filter, and view common objects
- Create a Secure Access Network Object
- Create a network object common to Catalyst SD-WAN and Secure Access
- Edit an SD-WAN or Secure Access Common Network Object
- Edit an object group in use by Secure Access and Catalyst SD-WAN
- Create a network object group
- Delete a common object or object group
- Object Issue Resolution
  - Resolve single object naming issues
  - Resolve object naming issues in bulk
  - Resolve single object local validation issues: Tunnel object error
  - Resolve Host Bits Set in Single Network Object
  - When group objects from Secure Access are incompatible with Catalyst SD-WAN
  - Deleting object from expired Catalyst SD-WAN
Manage Identity Provider Group Mapping
- Identity provider group map
- Map identity provider group
- Edit an identity provider group mapping
- Link an external identity provider
- Delink an external identity provider
Integrate Identity Providers
- Prerequisites
- SAML response requirements
- Step 1: Initial setup
- Step 2: Provide Security Cloud Control SAML metadata to your identity provider
- Step 3: Provide SAML metadata from your IdP to Security Cloud
- Step 4: Test your SAML integration
- Step 5: Activate the integration
- Troubleshooting SAML errors
Identity Service Provider Instructions
- Integrating Auth0 with Security Cloud Sign On
- Integrating Microsoft Entra ID with Security Cloud Sign On
- Integrating Duo with Security Cloud Sign On
- Integrating Google Identity with Security Cloud Sign On
- Integrating Okta with Security Cloud Sign On
- Integrating Ping Identity with Security Cloud Sign On
Activity Log
- View and export events in the activity log
SASE Management
- Configure and onboard SASE
- Enable SASE Management for existing Secure Access customers
- Enable SASE Management for existing Secure Access customers with Catalyst SD-WAN
- Cancel SASE Enablement if SD-WAN Onboarding Fails
- Re-enable SASE management
- Enter Activation Code to Onboard Catalyst SD-WAN
- Object Migration for Existing Secure Access Accounts
- SASE role upgrade for SCC-managed Secure Access RBAC
  - SASE management user roles
  - User roles in Security Service Edge, Catalyst SD-WAN, and Secure Access Service Edge
Catalyst SD-WAN Management
- Enable Catalyst SD-WAN in Security Cloud Control
Security Cloud Control API Keys
- About Security Cloud Control API Keys
- Generate an API Key with Network Restrictions
- View API Key Details
- Disable an API Key
- Re-enable a Disabled API Key
- Delete an API Key
- Refresh Access Token
Frequently Asked Questions
- General FAQs
- Security Cloud Sign On FAQs
- Switching from Google Authenticator to Duo MFA FAQs
- Provisioning FAQs
- Administrator access FAQs
- Identity provider and multi tenancy FAQs
Additional Documentation and Support
- Security Cloud Control Documentation
- AI Defense Documentation
- Security Cloud Control Firewall Management Documentation
- Multicloud Defense Documentation
- SASE Management with Common Objects
- Secure Access Documentation
- Secure Workload Documentation
- Browsers Supported by Security Cloud Control
Cisco Customer Support
- Cisco Technical Assistance Center (TAC)
- Cisco Support Access to your Organization
  - Manage Cisco Support Access

Manage Organizations Switch Organizations

Last updated: Jul 13, 2026

Previous topic Rename an organization Next topic Manage Subscriptions and Products