topic Re: windows single sign on with 802.1x(wireless) -ISE in Network Access Control

windows single sign on with 802.1x(wireless) -ISE

malel2015 — Fri, 21 Feb 2020 18:33:33 GMT

Hi,

How it is possible first time logon users able to login with their domain credentials ( wireless dot1x)

What must be done in the ISE

Thanks

Re: windows single sign on with 802.1x(wireless) -ISE

agrissimanis — Wed, 06 Sep 2017 10:22:03 GMT

This would not be a problem for domain credential based authentication (PEAP, etc.), you would not need any specific configuration for the first time logins. Just configure ISE authentication and authorization policies, there are many tutorials on how to do that.

In case of certificate based authentication (EAP-TLS) you wold need to provision certificates beforehand.

This is just a quick answer, there are many potential scenarios, depending on how your environment is set up, what supplicant you are using, etc.

Re: windows single sign on with 802.1x(wireless) -ISE

Mohamed Abd Elnaser Mohamed Mohamed Ali — Sat, 09 Sep 2017 18:53:55 GMT

Hi Male
As agrissimanis mentioned, it is pretty easy but need ISE and Supplicant configuration as summary of what you need:
-AD Integration with Cisco ISE as External Identity Source.
-User / Machine Authentication or both.
-The Authentication Protocol of Choice (PEAP, EAP-FAST, EAP-TLS) Each have its own considerations.
-The use of EAP-Chaining (Applicable only if you choose EAP-FAST)
-Supplicant type (Some considerations are here)
-Supplicant Operating Systems.
-Infrastructure support (PKI for TLS tunnel negotiation, SCCM for Supplicant rollout, AD GPO for Certificate enrolment for Endpoints, etc..)

Re: windows single sign on with 802.1x(wireless) -ISE

malel2015 — Mon, 11 Sep 2017 03:33:18 GMT

Hi,

Thanks for all . But still How my authentication authorization profile look like for the above purpose

any examples ?

Thanks