topic Re: ISE have Radius plug-in for ADFS in Network Access Control

ISE have Radius plug-in for ADFS

jideji2006 — Mon, 09 Mar 2020 15:08:47 GMT

Do Cisco ISE have Radius plug-in for ADFS, I have a unique use case where I want to proxy ADFS authentication to ISE for authorization.

Flow:

End user ---- ADFS ----- ISE for authorization

Re: ISE have Radius plug-in for ADFS

Arne Bier — Tue, 10 Mar 2020 05:28:06 GMT

Not that I can see 😞

What is your exact use case? 802.1X network authentication, or portal auth (e.g. SAML) ?

You may have to submit a feature request to Cisco.

Re: ISE have Radius plug-in for ADFS

jideji2006 — Tue, 10 Mar 2020 13:01:04 GMT

This is a portal authentication against ADFS and I would like ADFS to proxy the authentication to ISE for authorization.

Re: ISE have Radius plug-in for ADFS

Cristian Matei — Tue, 10 Mar 2020 13:22:12 GMT

Hi,

From ISE perspective, it just needs to receive RADIUS requests, match on its policies, and return the authorization. So it's a matter of ADFS to make use of RADIUS. You can use ADFS RADIUS plug-ins by building your own, or look out on the Internet for such available ADFS RADIUS plugins.

Regards,

Cristian Matei.

Re: ISE have Radius plug-in for ADFS

jideji2006 — Tue, 10 Mar 2020 13:32:10 GMT

Thanks Cristian. Yes, understand its possible to build one. I was wondering if Cisco has one so I don't spend time trying to build one. If Cisco have pre-build plugin, I do not like the idea of looking for any radius plug-ins on the internet 🙂

Re: ISE have Radius plug-in for ADFS

Cristian Matei — Tue, 10 Mar 2020 13:59:50 GMT

Hi,

Look in the Microsoft community/forums, or on github I'm sure you'll find some already done. For example:

https://github.com/davehope/RadiusAuthenticationAdapter

As far as I'm aware, there is no Cisco validated RADIUS plug-in for ADFS.

Regards,

Cristian Matei.