300-730 · Question #57
What are two variables for configuring clientless SSL VPN single sign-on? (Choose two.)
The correct answer is B. CSCO_WEBVPN_INTERNAL_PASSWORD C. CSCO_WEBVPN_USERNAME. Cisco ASA clientless SSL VPN SSO uses predefined macro variables to pass credentials to internal applications, with username and internal password being the two required variables.
Question
Options
- ACSCO_WEBVPN_OTP_PASSWORD
- BCSCO_WEBVPN_INTERNAL_PASSWORD
- CCSCO_WEBVPN_USERNAME
- DCSCO_WEBVPN_RADIUS_USER
How the community answered
(23 responses)- A4% (1)
- B87% (20)
- D9% (2)
Why each option
Cisco ASA clientless SSL VPN SSO uses predefined macro variables to pass credentials to internal applications, with username and internal password being the two required variables.
CSCO_WEBVPN_OTP_PASSWORD is not a standard Cisco ASA clientless SSL VPN SSO macro variable; one-time password handling is managed separately and does not use this variable name.
CSCO_WEBVPN_INTERNAL_PASSWORD is the macro variable that holds the user's internal (cached or mapped) password and is passed to backend applications during SSO authentication on the ASA.
CSCO_WEBVPN_USERNAME is the macro variable that holds the authenticated username and is required alongside the password variable to complete an SSO credential submission to internal web resources.
CSCO_WEBVPN_RADIUS_USER is not a valid predefined SSO macro variable for Cisco ASA clientless SSL VPN; RADIUS authentication attributes are handled through AAA policy, not SSO macros.
Concept tested: Clientless SSL VPN SSO macro variable configuration
Source: https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/vpn/asa-96-vpn-config/webvpn-configure-users.html
Topics
Community Discussion
No community discussion yet for this question.