topic Re: ISE-Certificate-Authenticated Admin User Unable to Create External Groups in Network Access Control

ISE-Certificate-Authenticated Admin User Unable to Create External Groups

aamilbur — Wed, 29 Aug 2018 15:11:13 GMT

Customer has discovered a bug with Admin Access configuration on Cisco ISE 2.3. An AD credentials-authenticated (user/password) SuperAdmin can create external groups for RBAC, but the same user authenticated with certificate (CAC Card) can not. Window for selection of available external groups does not get populated when the SuperAdmin user is authenticated via certificate. Validated same condition on my lab systems. Is this by design, or is this behavior considered to be a bug? If by design, no documentation regarding this functionality is apparent. Thanks!

Re: ISE-Certificate-Authenticated Admin User Unable to Create External Groups

hslai — Thu, 30 Aug 2018 12:58:25 GMT

If the TAC case associated with this, please ask TAC to file a bug. Otherwise, you may do so yourself with the detailed steps to recreate it and provide info about the affected customer so the bug qualified as customer-found.

Re: ISE-Certificate-Authenticated Admin User Unable to Create External Groups

aamilbur — Fri, 05 Oct 2018 12:40:13 GMT

Bug has been created for this issue:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvd78113

CSCvd78113

Thanks for the assist!