topic Re: Can we make Identity source sequence from ISE user? in Network Access Control

Can we make Identity source sequence from ISE user?

interfacedy — Mon, 30 Aug 2021 23:43:29 GMT

Hi I created user accounts in ISE via "Administrator --- Identity Management --- Identities --- Users". When I am trying to create "Identity Source Sequence", I cannot see the user accounts that I created in ISE via "Administrator --- Identity Management --- Identity Source Sequences --- + Add". Please see the below screenshot. Is it possible to put the users accouts(user info) into that available database to create Identity Source Sequence? Thanks

Re: Can we make Identity source sequence from ISE user?

Amine ZAKARIA — Tue, 31 Aug 2021 00:00:40 GMT

Hello @interfacedy ,

When you create a user on ISE it is placed on Internal Users Identity Source, The use of Identity Source Sequence is to combine multiple Identity Sources into one Logical Authentication Source (Identity Source Sequence), these Identities Sources are processed from top to down.

Hope that helps.

Re: Can we make Identity source sequence from ISE user?

Amine ZAKARIA — Tue, 31 Aug 2021 00:22:07 GMT

You did change your question, the users you have created are under Internal Users ISE DB, Select that Identity Source and check the Superior sign to add it into the Identity Source Sequence.

Re: Can we make Identity source sequence from ISE user?

interfacedy — Tue, 31 Aug 2021 01:06:55 GMT

Thank you Amine! Can I see the users that I created are in Internal Users, and I want to see what other users are in there?

Re: Can we make Identity source sequence from ISE user?

Amine ZAKARIA — Tue, 31 Aug 2021 01:20:15 GMT

All the Users You have created under Identity Management stored in Internal Users DB, you can see them from the Identity Management Tab, except that you can't access the ISE DB directly.

Re: Can we make Identity source sequence from ISE user?

interfacedy — Tue, 31 Aug 2021 03:36:21 GMT

Thank you!

Re: Can we make Identity source sequence from ISE user?

interfacedy — Wed, 01 Sep 2021 23:16:29 GMT

I retrieved data succefully based on the below picture, but i cannot see these users info in "Administrator --- Identity Management --- Identities --- Users". Is this normal? Thanks

Re: Can we make Identity source sequence from ISE user?

Amine ZAKARIA — Wed, 01 Sep 2021 20:05:30 GMT

Hello @interfacedy ,

I think you misunderstood me, That's External Identity Source these Users are stored in AD DS not ISE, the Internal Users Identity Store contains Users you have created in ISE, and ISE groups exist under Administration -> Identity Management -> Groups.

Your capture shows the groups existing in Active directory not ISE.

Re: Can we make Identity source sequence from ISE user?

interfacedy — Wed, 01 Sep 2021 23:30:36 GMT

@Amine ZAKARIA wrote:
Your capture shows the groups existing in Active directory not ISE.

It means user account data in Active directory never goes into ISE? and it also means the data retrieved above can only be see through ISE gui, but it never exist in ISE, correct? Thanks

Re: Can we make Identity source sequence from ISE user?

Amine ZAKARIA — Wed, 01 Sep 2021 23:41:50 GMT

@interfacedy

Correct, you retrieve these groups for being used in Authorization Policy.