topic Re: Login to ISE PIC using AD credentials in Network Access Control https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529692#M557836 <HTML><HEAD></HEAD><BODY><P>Thomas, </P><P>This is not Full ISE and just the ISE-PIC which does not have all the options as Full ISE to map the External ID sources. </P><P></P><P>The customer has to install a full ISE in order to leverage the AD authentication functionality. </P></BODY></HTML> Thu, 17 May 2018 17:00:14 GMT sampathss 2018-05-17T17:00:14Z Login to ISE PIC using AD credentials https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529684#M557828 <HTML><HEAD></HEAD><BODY><P>Hello, </P><P></P><P>Is there a way to login to ISE PIC UI using AD credentials? Not sure there is any option to configure the Authentication method as AD, like it has in the Full ISE. </P><P></P><P>Thanks</P><P>Sampath</P></BODY></HTML> Fri, 21 Feb 2020 18:48:45 GMT https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529684#M557828 sampathss 2020-02-21T18:48:45Z Re: Login to ISE PIC using AD credentials https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529685#M557829 <HTML><HEAD></HEAD><BODY><P>I don’t believe so. You have to buy base licenses.</P></BODY></HTML> Wed, 14 Mar 2018 16:57:21 GMT https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529685#M557829 gbekmezi-DD 2018-03-14T16:57:21Z Re: Login to ISE PIC using AD credentials https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529686#M557830 <HTML><HEAD></HEAD><BODY><P>So installing the base license would bring back the authentication method? So the feature exists today where they can use AD to login to PIC UI, right?</P></BODY></HTML> Wed, 14 Mar 2018 17:07:10 GMT https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529686#M557830 sampathss 2018-03-14T17:07:10Z Re: Login to ISE PIC using AD credentials https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529687#M557831 <HTML><HEAD></HEAD><BODY><P>Installing the base license converts it from PIC to standard ISE.</P></BODY></HTML> Wed, 14 Mar 2018 18:19:03 GMT https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529687#M557831 gbekmezi-DD 2018-03-14T18:19:03Z Re: Login to ISE PIC using AD credentials https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529688#M557832 <HTML><HEAD></HEAD><BODY><P>So In that case, with being on PIC, there is no option at this point to use AD to login. Is that a fair statement? </P></BODY></HTML> Wed, 14 Mar 2018 18:21:16 GMT https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529688#M557832 sampathss 2018-03-14T18:21:16Z Re: Login to ISE PIC using AD credentials https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529689#M557833 <HTML><HEAD></HEAD><BODY><P>Yes. Please see <A href="https://community.cisco.com/docs/DOC-70144">ISE-PIC FAQ</A></P><P></P><P>- Krish</P></BODY></HTML> Tue, 15 May 2018 18:33:03 GMT https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529689#M557833 kvenkata1 2018-05-15T18:33:03Z Re: Login to ISE PIC using AD credentials https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529690#M557834 <HTML><HEAD></HEAD><BODY><P>ISE PIC should work the same as ISE for RBAC administrator login.</P><P>Please read <A href="https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_0101.html#ID766"><STRONG>Administrative Access to Cisco ISE Using an External Identity Store</STRONG></A></P><P></P><P>Once you join ISE to your AD domain you should be able to use your AD groups for Administrator logins &amp; RBAC:</P><P></P><P><IMG alt="" class="jive-image image-2" src="https://community.cisco.com/legacyfs/online/fusion/117088_pastedImage_2.png" style="max-width: 1200px; max-height: 900px;" title="" /></P><P></P><P>Then under Administration &gt; System &gt; Admin Access &gt; Adminstrators &gt; Admin Groups:</P><P><IMG alt="" class="image-1 jive-image" height="348" src="https://community.cisco.com/legacyfs/online/fusion/117087_pastedImage_0.png" style="width: 404.389px; height: 348px;" width="404" /></P></BODY></HTML> Wed, 16 May 2018 00:12:48 GMT https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529690#M557834 thomas 2018-05-16T00:12:48Z Re: Login to ISE PIC using AD credentials https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529691#M557835 <HTML><HEAD></HEAD><BODY><P>Unfortunately, you just do not have a place to specify external identity source in PIC. Also there is no RBAC only admin authentication. <SPAN style="font-size: 10pt;">Please see below:</SPAN></P><P><IMG alt="screen2.png" class="image-1 jive-image" src="https://community.cisco.com/legacyfs/online/fusion/117129_screen2.png" style="height: 437px; width: 620px;" /></P></BODY></HTML> Thu, 17 May 2018 16:29:09 GMT https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529691#M557835 aklyuchk 2018-05-17T16:29:09Z Re: Login to ISE PIC using AD credentials https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529692#M557836 <HTML><HEAD></HEAD><BODY><P>Thomas, </P><P>This is not Full ISE and just the ISE-PIC which does not have all the options as Full ISE to map the External ID sources. </P><P></P><P>The customer has to install a full ISE in order to leverage the AD authentication functionality. </P></BODY></HTML> Thu, 17 May 2018 17:00:14 GMT https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529692#M557836 sampathss 2018-05-17T17:00:14Z Re: Login to ISE PIC using AD credentials https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529693#M557837 <HTML><HEAD></HEAD><BODY><P>That is correct Andrey, ISE PIC does not have that option, which would be good to have for sure.</P></BODY></HTML> Thu, 17 May 2018 17:01:07 GMT https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529693#M557837 sampathss 2018-05-17T17:01:07Z Re: Login to ISE PIC using AD credentials https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529694#M557838 <HTML><HEAD></HEAD><BODY><P>I submitted this thread as a PIC feature request to use AD for Admin UI for authentication &amp; RBAC.</P></BODY></HTML> Tue, 22 May 2018 15:36:05 GMT https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529694#M557838 thomas 2018-05-22T15:36:05Z Re: Login to ISE PIC using AD credentials https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529695#M557839 <HTML><HEAD></HEAD><BODY><P>Thank you Thomas.</P></BODY></HTML> Tue, 22 May 2018 15:40:38 GMT https://community.cisco.com/t5/network-access-control/login-to-ise-pic-using-ad-credentials/m-p/3529695#M557839 sampathss 2018-05-22T15:40:38Z