topic Re: ISE 3.3 - Sponsor One Click Approval and Entra ID in Network Access Control

ISE 3.3 - Sponsor One Click Approval and Entra ID

nani_gvd — Thu, 10 Oct 2024 20:11:19 GMT

Hi,

Been struggling to get this to work and to find if it's supported. Is the One Click Sponsor approval via email supported when using EntraID REST as External Identity?
When configuring a Sponsor Group, I'm able to set the Other Condition to the ExternalGroup , but when clicking the token link in the email, I'm prompted for credentials...

Re: ISE 3.3 - Sponsor One Click Approval and Entra ID

Greg Gibbs — Sun, 13 Oct 2024 22:04:19 GMT

As per the FAQ for this feature, it will not work with SAML-based flows, so I would not expect it to work with API based authentication/authorization methods like REST ID. Only AD and LDAP are discussed as supported.

Re: ISE 3.3 - Sponsor One Click Approval and Entra ID

nani_gvd — Mon, 14 Oct 2024 12:37:55 GMT

thanks @Greg Gibbs
the post from Jason Kunst was referring to 2.2, but it seems indeed there is no support for it in version 3.3 as well.