Login

Cisco Security Cloud Control Administration Guide

About Cisco Security Cloud Control
- Products Managed by Cisco Security Cloud Control
Platform Services for all Products
- Manage Security Devices
- Manage Objects
- Global Search
  - Initiate Full Indexing
  - Perform a Global Search
- Preview and Deploy Configuration Changes for All Devices
- Additional Configuration Assistance
- Integrate Identity Services Engine with Security Cloud Control
- Organization Notification Settings
- Security Cloud Control Platform Navigator
- Give us your Feedback
Managing Organizations
- Setting a Region for an Organization
- Create an Organization
- Rename an organization
- Switch organizations
- Cisco Support Access to your Organization
  - Enable Cisco Support Access
  - Disable support access
Managing Products and Subscriptions
- Overview of Subscription Process
- Single Product Instance in an Organization
- Claim a Subscription
- Activate a Product Instance
  - Activate an Inactive Product Instance
  - Activate an Externally Managed Product Instance
  - Activation Code to Activate Externally Managed Product Instance
  - Activate a Product Instance with Further Inputs
- View Product Subscription Details
- Deactivate a Product Instance
Onboard Devices to Security Cloud Control
- Secure ASA Onboarding Methods
- Secure Firewall Threat Defense Onboarding Methods
- On-Premises Firewall Management Center Onboarding Methods
- Meraki Security Appliance Onboarding Methods
- Cisco IOS Device Onboarding Methods
- Secure Firewall Chassis Manager Onboarding Methods
- AWS Virtual Private Cloud Onboarding Methods
- Cisco Umbrella Organization Onboarding Methods
Managing Role-Based Access Control
- Role-Based Access Control in an Organization
  - Managing Users
  - Managing Groups
  - Managing Roles
- Invite a User
- Import Users
- View or Find Users
- Edit a User Name
- Assign Roles to a User
- Add a User to Groups
- Assign Roles to Existing Users
- Remove Role Assignments
- Create a Custom Role
- Edit a Custom Role
- Delete a Custom Role
- Custom Role for Cisco Secure Workload
- Reset Multifactor Authentication Settings
- Reset User Password
- Disable a User Account
- Restore a User Account
- Remove a User Account
- Create a New Group
- Edit a Group Name
- Add Users to a Group
- Assign Roles to Groups
- Remove users from a group
- Delete a Group
- Manage Role Delegation
- Logging the Events
  - View the Activity Log
Managing Domains
- Overview
- Claim and verify a domain
Managing Identity Provider Group Mapping
- Identity Provider Group Map
- Map Identity Provider Group
- Edit an identity provider group mapping
- Link an External Identity Provider
- Delink an External Identity Provider
Integrating Identity Providers
- Prerequisites
- SAML Response Requirements
- Step 1: Initial setup
- Step 2: Provide Security Cloud SAML metadata to your identity provider
- Step 3: Provide SAML metadata from your IdP to Security Cloud
- Step 4: Test your SAML integration
- Step 5: Activate the integration
- Troubleshooting SAML errors
Identity Service Provider Instructions
- Integrating Auth0 with Security Cloud Sign On
- Integrating Microsoft Entra ID with Security Cloud Sign On
- Integrating Duo with Security Cloud Sign On
- Integrating Google Identity with Security Cloud Sign On
- Integrating Okta with Security Cloud Sign On
- Integrating Ping Identity with Security Cloud Sign On

Platform Secure Firewall Threat Defense Virtual

Activity Manage

Managing Products and Subscriptions Activate a Product Instance Activate an Externally Managed Product Instance

Last updated: Jul 17, 2025

Activate an Externally Managed Product Instance

A product instance that is managed outside of Security Cloud Control, must first be attached to the Security Cloud organization and then activated.

After you have chosen to activate an existing instance that is externally managed, the product team initiates the attach process by sending an email to the Security Cloud Control administrator with an invitation to attach the instance to Security Cloud. During this process, the Action required button for the product instance is disabled.

After you have attached the external instance to the Security Cloud organization, the Action required button for the product is enabled for you to complete the activation process.

External product instances that are attached to Security Cloud Control have an Externally managed label next to their product name.

If you do not see the Externally managed label for the product instance, then don't activate the instance. Consult your activation specialist or contact Cisco Support.

If you do not see the option to attach an external instance to an organization, consult your activation specialist or contact Cisco Support.

Procedure

1

In Security Cloud Control, select the organization to which you want to attach the externally managed product instance.

At this stage, the Action required button for the product in the Product and service activation status section is disabled.

Banner for the external product Cisco Secure Access displays the message "Once you have attached your existing instance of product to the organization, the Action required button is enabled to complete the activation process."

If you have inadvertently attached an external instance or if you want to activate a new instance, cancel the attachment of the instance.

To cancel the attachment of the external instance, click Cancel.
In the resulting dialog box, click Create.

Security Cloud Control creates and activates a new instance of the product.

The product activation process ends here.

2

In the Invitations to attach existing product section, click Attach product for the product that you want to attach.

In the Overview page, Cisco Secure Access appears under the Invitations to attach existing product.

A dialog box displays.

3

Click Attach.

The Products section displays the attached product with an Externally managed label.

After the Cisco Secure Access is activated, it appears as a tile under the Products section. The Secure Access tile is labeled as Externally managed and the tile displays subscription ID, end date, instance ID, region, and quantity of Cisco Secure Access.

The Action required button for the product is now enabled.

For certain products, instead of the Action required button, an activation code is generated. In such cases, refer to the Activation Code to Activate Externally Managed Product Instance procedure for further steps.

4

Click Action required.

Enter further inputs when prompted and save the changes.

Secure Access activation requires further inputs such which instance to activate.

The product instance is activated.

Previous topic Activate an Inactive Product Instance Next topic Activation Code to Activate Externally Managed Product Instance