topic Re: ISE 3.3 in Network Access Control

ISE 3.3

malik.shafqat1 — Tue, 19 Aug 2025 11:19:38 GMT

We are facing an issue with our Cisco ISE deployment (version 3.3). After enabling the External Admin Authentication Source from the GUI, we are no longer able to log in to the ISE GUI with the internal admin account or any newly created accounts.

Details:

Cisco ISE version: 3.3
Access to CLI is working (we can log in with the CLI admin user).
Tried the following without success:
- application reset-passwd ise admin
- application create-superadmin-user <username> (This command is not working)
- Creating new local admin users from CLI
Problem: All these accounts only work for CLI. The GUI does not accept them because the Internal Admin source is disabled.

As a result, we are completely locked out of the GUI.

Request:
Please assist in re-enabling the Internal Admin Authentication Source (or guide us on how to reset this flag) so that we can log in to the GUI again.

Re: ISE 3.3

Mark Elsen — Tue, 19 Aug 2025 11:30:45 GMT

- @malik.shafqat1 Check if you can find any useful info's from these logs through the CLI
show logging application ise-psc.log
show logging application ise-admin.log
show logging application ise-identity.log

Re: ISE 3.3

Torbjørn — Tue, 19 Aug 2025 11:34:49 GMT

You cannot see the dropdown menu under the username & password field to select the authentication "domain"?

Re: ISE 3.3

MHM Cisco World — Tue, 19 Aug 2025 12:20:47 GMT

reset the Admin GUI authentication method <<- this option under ""application configure ise""

Check it

Note:- I dont use it before' read more before apply any change

MHM