Cisco Security Cloud Control Administration Guide

Login

Cisco Security Cloud Control Administration Guide

Overview of Cisco Security Cloud Control
Platform Services for all Products
- Manage security devices
- Services UI
  - Reference for enabling Cisco products
- Global search
  - Initiate full indexing
  - Perform a global search
- Preview and deploy configuration changes for all devices
- In-Product Announcements
- Talos Intelligence
- Additional Feature and Configuration Suggestions
- Integrate Identity Services Engine with Security Cloud Control
- Organization Notification Settings
- Use the Security Cloud Control Firewall Management platform navigator
- Set Background Theme
- Give us your Feedback
Organizations
- Create an organization
- Setting a region for the organization
- View Organization Details
- Rename an organization
- Switch Organizations
Subscriptions and Services
- About subscriptions and services
  - Subscription and service types
  - Claim code email for subscriptions
  - How trial subscriptions work
  - Subscription expiration grace period
  - Local data residency platform support
    - Claim LDR subscription
- Claim a paid or trial subscription
  - Claim a subscription for a new instance
  - Stack a trial subscription on an existing instance
  - Claim a subscription for an inactive instance
  - Claim a subscription for an externally managed instance
  - Replace a subscription
  - Enable a platform-enabled service
- Manage subscriptions and services
  - Transfer a subscription
  - Deactivate a product instance
  - Migrate existing subscriptions and product instances to an organization
    - Integrate subscriptions and product instances using an activation code
- View product subscription details
Administrator Access
- Administrator Access in an Organization
  - Managing Users
  - Managing Groups
  - Managing Roles
- Invite a User
- Import Users
- View or Find Users
- Reinvite a User
- Edit a User Name
- Assign Roles to a User
- Add a User to Groups
- Assign Roles to Existing Users
- Remove Role Assignments
- Create a Custom Role
- Edit a Custom Role
- Delete a Custom Role
- Custom Role for Cisco Secure Workload
- Reset Multifactor Authentication Settings
- Reset User Password
- Disable a User Account
- Restore a User Account
- Remove a User Account
- Create a New Group
- Edit a Group Name
- Add Users to a Group
- Assign Roles to Groups
- Remove users from a group
- Delete a Group
- Manage Role Delegation
Domains
- Domains Overview
- Claim and verify a domain
Common Objects and Object Groups
- Common Objects
  - Key characteristics of common objects
- Common Object Groups
  - Key characteristics of object groups
  - Objects that can be combined in an object group
- Supported types of common objects
- Object naming requirements
- Object limits within an organization
- Common object store
  - Search, filter, and view common objects
- Create a Secure Access Network Object
- Create a network object common to Catalyst SD-WAN and Secure Access
- Edit an SD-WAN or Secure Access Common Network Object
- Edit an object group in use by Secure Access and Catalyst SD-WAN
- Create a network object group
- Delete a common object or object group
- Object Issue Resolution
  - Resolve single object naming issues
  - Resolve object naming issues in bulk
  - Resolve single object local validation issues: Tunnel object error
  - Resolve Host Bits Set in Single Network Object
  - When group objects from Secure Access are incompatible with Catalyst SD-WAN
  - Deleting object from expired Catalyst SD-WAN
Identity Provider Group Mapping
- Identity provider group map
- Map identity provider group
- Edit an identity provider group mapping
- Link an external identity provider
- Delink an external identity provider
Integrate Identity Providers
- Prerequisites
- SAML response requirements
- Step 1: Initial setup
- Step 2: Provide Security Cloud Control SAML metadata to your identity provider
- Step 3: Provide SAML metadata from your IdP to Security Cloud
- Step 4: Test your SAML integration
- Step 5: Activate the integration
- Troubleshooting SAML errors
Configure Multiple Identity Providers
- About multiple identity providers
- Configure the Security Assertion Markup Language (SAML)
- Add and verify domains for new organizations
- Add routing rules
  - Edit routing rules
  - Deactivate and delete routing rules
- Configure OpenID Connect
- Create routing groups
- Create a self-recovery account
Identity Service Provider Instructions
- Integrating Auth0 with Security Cloud Sign On
- Integrating Microsoft Entra ID with Security Cloud Sign On
- Integrating Duo with Security Cloud Sign On
- Integrating Google Identity with Security Cloud Sign On
- Integrating Okta with Security Cloud Sign On
- Integrating Ping Identity with Security Cloud Sign On
Activity Log
- View and export events in the activity log
SASE Management
- Configure and onboard SASE
- Enable SASE Management for existing Secure Access customers
- Enable SASE Management for existing Secure Access customers with Catalyst SD-WAN
- Cancel SASE Enablement if SD-WAN Onboarding Fails
- Re-enable SASE management
- Enter Activation Code to Onboard Catalyst SD-WAN
- Object Migration for Existing Secure Access Accounts
- SASE role upgrade for SCC-managed Secure Access RBAC
  - SASE management user roles
  - User roles in Security Service Edge, Catalyst SD-WAN, and Secure Access Service Edge
Security Cloud Control API Keys
- About Security Cloud Control API Keys
- Generate an API Key with Network Restrictions
- View API Key Details
- Disable an API Key
- Re-enable a Disabled API Key
- Delete an API Key
- Refresh Access Token
Frequently Asked Questions
- General FAQs
- Security Cloud Sign On FAQs
- Switching from Google Authenticator to Duo MFA FAQs
- Provisioning FAQs
- Administrator access FAQs
- Identity provider and multi tenancy FAQs
Additional Documentation and Support
- Security Cloud Control Documentation
- AI Defense Documentation
- Security Cloud Control Firewall Management Documentation
- Multicloud Defense Documentation
- SASE Management with Common Objects
- Secure Access Documentation
- Secure Workload Documentation
- Browsers Supported by Security Cloud Control
Cisco Customer Support
- Cisco Technical Assistance Center (TAC)
- Cisco Support Access to your Organization
  - Manage Cisco Support Access

Last updated: Sep 29, 2026

Previous topic Next topic