Cisco Security Cloud Control Administration Guide

Login

Cisco Security Cloud Control Administration Guide

Overview of Cisco Security Cloud Control
Platform Services for all Products
- Manage Security Devices
- Global Search
  - Initiate Full Indexing
  - Perform a Global Search
- Preview and Deploy Configuration Changes for All Devices
- In-Product Announcements
- Talos Intelligence
- Additional Feature and Configuration Suggestions
- Integrate Identity Services Engine with Security Cloud Control
- Organization Notification Settings
- Use the Security Cloud Control Firewall Management platform navigator
- Set Background Theme
- Give us your Feedback
Manage Organizations
- Create an organization
- Setting a region for the organization
- View Organization Details
- Rename an organization
- Switch Organizations
Manage Subscriptions and Products
- About subscriptions
  - How multiple subscriptions behave for a product instance
- Claim a subscription
- Replace a subscription
- Perform Additional Activation Steps
  - Activate an inactive product instance
  - Activate an externally managed product instance
  - Apply an activation code for an externally managed product instance
  - Activate a product instance with further inputs
- View product subscription details
- Deactivate a product instance
Manage Role-Based Access Control
- Role-Based Access Control in an Organization
  - Managing Users
  - Managing Groups
  - Managing Roles
- Invite a User
- Import Users
- View or Find Users
- Reinvite a User
- Edit a User Name
- Assign Roles to a User
- Add a User to Groups
- Assign Roles to Existing Users
- Remove Role Assignments
- Create a Custom Role
- Edit a Custom Role
- Delete a Custom Role
- Custom Role for Cisco Secure Workload
- Reset Multifactor Authentication Settings
- Reset User Password
- Disable a User Account
- Restore a User Account
- Remove a User Account
- Create a New Group
- Edit a Group Name
- Add Users to a Group
- Assign Roles to Groups
- Remove users from a group
- Delete a Group
- Manage Role Delegation
Manage Domains
- Domains Overview
- Claim and verify a domain
Common Objects and Object Groups
- Common Objects
  - Key characteristics of common objects
- Common Object Groups
  - Key characteristics of object groups
- Supported types of common objects
- Object naming requirements
- Object limits within an organization
- Common object store
  - Objects that can be combined in an object group
  - Objects that cannot be combined in an object group and shared between Secure Access and Catalyst SD-WAN
  - Search, filter, and view common objects
- Create a Secure Access Network Object
- Create a network object common to Catalyst SD-WAN and Secure Access
- Edit an SD-WAN or Secure Access Common Network Object
- Edit an object group in use by Secure Access and Catalyst SD-WAN
- Create a network object group
- Delete a common object or object group
- Object Conflict Resolution
  - Resolve single object naming issues
  - Resolve object naming issues in bulk
  - Resolve single object local validation issues: Tunnel object error
  - Resolve single object local validation issues: Host Bits Set in Network Object
- SASE Management
Manage Identity Provider Group Mapping
- Identity provider group map
- Map identity provider group
- Edit an identity provider group mapping
- Link an external identity provider
- Delink an external identity provider
Integrate Identity Providers
- Prerequisites
- SAML response requirements
- Step 1: Initial setup
- Step 2: Provide Security Cloud Control SAML metadata to your identity provider
- Step 3: Provide SAML metadata from your IdP to Security Cloud
- Step 4: Test your SAML integration
- Step 5: Activate the integration
- Troubleshooting SAML errors
Identity Service Provider Instructions
- Integrating Auth0 with Security Cloud Sign On
- Integrating Microsoft Entra ID with Security Cloud Sign On
- Integrating Duo with Security Cloud Sign On
- Integrating Google Identity with Security Cloud Sign On
- Integrating Okta with Security Cloud Sign On
- Integrating Ping Identity with Security Cloud Sign On
Activity Log
- View and export events in the activity log
Security Cloud Control API Keys
- About Security Cloud Control API Keys
- Generate an API Key with Network Restrictions
- View API Key Details
- Disable an API Key
- Re-enable a Disabled API Key
- Delete an API Key
- Refresh Access Token
Frequently Asked Questions
- General FAQs
- Security Cloud Sign On FAQs
- Switching from Google Authenticator to Duo MFA FAQs
- Provisioning FAQs
- Administrator access FAQs
- Identity provider and multi tenancy FAQs
Additional Documentation and Support
- Security Cloud Control Documentation
- AI Defense Documentation
- Security Cloud Control Firewall Management Documentation
- Multicloud Defense Documentation
- SASE Management with Common Objects
- Secure Access Documentation
- Secure Workload Documentation
- Browsers Supported by Security Cloud Control
- Cisco Support Access to your Organization
  - Enable Cisco Support Access
  - Disable Cisco Support Access
- Cisco Customer Support

Last updated: Jun 01, 2026

Previous topic Next topic