Login

Security Cloud Control Getting Started Guide for Existing Customers

Before you Begin
- Is This Guide For you
- About Cisco Security Cloud Control
- Products Managed by Cisco Security Cloud Control
- Getting Started Workflow
Signing in to Security Cloud Control
- Signing in to Security Cloud Control
- Overview of Security Cloud Sign On
- Products Supported by Security Cloud Sign On
- Creating a Security Cloud Sign On Account
Your Landing Page
- Set Your Default Landing Page
Organizations and Regions
- Create an Organization
Add a Domain
- Claim and verify a domain
Integrate an Identity Provider
- Prerequisites
- SAML Response Requirements
- Step 1: Initial setup
- Step 2: Provide Security Cloud SAML metadata to your identity provider
- Step 3: Provide SAML metadata from your IdP to Security Cloud
- Step 4: Test your SAML integration
- Step 5: Activate the integration
- Troubleshooting SAML errors
Role-Based Access Control (RBAC)
- Role-Based Access Control in an Organization
- Invite a User
- Import Users
- Create a New Group
- Add Users to a Group
- Assign Roles to Groups
Claim Your Product Subscriptions
- Overview of Subscription Process
- Enable Firewall in Security Cloud Control
- Claim a Subscription
- Activate a Product Instance
  - Activate an Inactive Product Instance
  - Activate an Externally Managed Product Instance
  - Activation Code to Activate Externally Managed Product Instance
  - Activate a Product Instance with Further Inputs
Onboard Devices to Security Cloud Control
- Secure ASA Onboarding Methods
- Secure Firewall Threat Defense Onboarding Methods
- On-Premises Firewall Management Center Onboarding Methods
- Meraki Security Appliance Onboarding Methods
- Cisco IOS Device Onboarding Methods
- Secure Firewall Chassis Manager Onboarding Methods
- AWS Virtual Private Cloud Onboarding Methods
- Cisco Umbrella Organization Onboarding Methods
Next Steps
- Additional Configuration Assistance
Additional Documentation and Support
- AI Defense Documentation
- Firewall in Security Cloud Control Documentation
- Multicloud Defense Documentation
- Secure Access Documentation
- Secure Workload Documentation
- Customer Support Resources
Cisco Support Access
- Cisco Support Access to your Organization
- Enable Cisco Support Access

Activity Onboard

Integrate an Identity Provider Step 1: Initial setup

Last updated: Jul 16, 2025

Step 1: Initial setup

Before you begin

To begin, you must provide a name for your Secure Cloud organization, and decide if you want to enroll your users in Duo Multifactor Authentication at no cost, or use your own MFA solution.

For all integrations, Cisco strongly recommends implementing MFA with a session timeout no greater than two hours, to help protect your sensitive data within Cisco Security products.

Procedure

1

In the Security Cloud Control platform menu, choose Platform Services > Platform Management.

2

Choose Integrations > Identity Providers.

3

Click + Add Identity Provider.

If you haven't claimed a domain yet you will instead see an + Add Domain button. Click that button to begin claiming your domain.

4

On the Set up page, enter a name for your identity provider.

5

If needed, opt-out of Duo MFA for users in your claimed domain.

6

Click Next to advance to the Configure page.

Previous topic SAML Response Requirements Next topic Step 2: Provide Security Cloud SAML metadata to your identity provider