> For the complete documentation index, see [llms.txt](https://docs.p0.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.p0.dev/integrations/resource-integrations/cisco-secure-access/requesting-access.md).

# Requesting Cisco Secure Access

This guide explains how to request just-in-time access to private network resources protected by Cisco Secure Access through P0.

## Overview

When your organization uses P0 with Cisco Secure Access, you can request temporary access to private resources (servers, databases, applications) without permanent access rules. P0 creates a time-limited Access Policy rule in Cisco Secure Access and automatically removes it when access expires or is revoked.

## Prerequisites

Before requesting access, ensure you have:

* **P0 access**: Your P0 account is set up and you belong to the relevant access groups.
* **Cisco Secure Access client**: Install the Cisco Secure Access client application on your workstation.
* **SSO credentials**: Your identity provider credentials (for example, Okta, Microsoft Entra ID).

## Requesting from the P0 app

1. Open the P0 app and navigate to the **Access Management** page.
2. Click **Request Access**.
3. Click the dropdown for **Resource** and select **Cisco Secure Access**.
4. Select your **Organization** and enter the **Private Resource** name or ID.
5. Enter **Reason access is needed** and **Requested access duration**. Both fields are optional.

Once you submit the request, an approver can navigate to the **Access Management** page, select **Approve**, and approve the request for a specific time. If the system is configured for auto-approval, it grants access immediately.

To revoke access early, an approver can navigate to the **Access Management** page, select the **Prior Approval** tab, and click **Revoke**.

## After access is granted

1. Open the **Cisco Secure Access client** on your workstation.
2. Log in with your **SSO credentials**.
3. Connect to the private resource using its **private IP address**.

P0 automatically removes the access rule when the granted duration expires.

## Additional resources

* [Cisco Secure Access documentation](https://docs.sse.cisco.com/sse-dns-guide/docs/get-started-secure-access)
* [Cisco Secure Access API reference](https://developer.cisco.com/docs/cloud-security/secure-access-api-reference-overview/)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.p0.dev/integrations/resource-integrations/cisco-secure-access/requesting-access.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.