topic REST API ACS vs ISE in Network Security

REST API ACS vs ISE

Thomas Buergi — Fri, 21 Feb 2020 12:54:50 GMT

Hi all

We are currently using ACS for wireless authentication. Guests register over an external Sharepoint webpage. The REST API is used to create and later delete these temporary users in ACS.

Now we want to migrate to ISE. In contrast to ACS, the ISE REST API seems to have no CRUD (Create, Read, Update and Delete) capabilities for Users. The ISE internal guest portal at the other hand we don't want to use.

Is there any other possibility to create Users in ISE from an external Application ?

Thanks Thomas

REST API ACS vs ISE

DanielSpeck — Thu, 24 Oct 2013 13:22:06 GMT

Hi Thomas, I have the same situation. Did you ever find a resolution to this with ISE?

REST API ACS vs ISE

Anas Naqvi — Fri, 01 Nov 2013 00:49:38 GMT

Hi Thomas,

Cisco ISE allows you to view, create, modify, duplicate, delete, change the status, import, export, or search for attributes of Cisco ISE users.

ISE also allows you to import user data in the form of a csv file into its internal database. Instead of entering user accounts manually into Cisco ISE, you can import them.

Following are the steps,

Step 1 Choose Administration > Identity Management > Identities > Users.

Step 2 Click Import to import users from a comma-delimited text file.

Tip (Optional) If you do not have a comma-delimited text file, click Generate a Template to create this type of file.

Step 3 In the File text box, enter the filename containing the users to import, or click Browse and navigate to the location where the file resides.

Step 4 Check the Create new user(s) and update existing user(s) with new data check boxes if you want to both create new users and update existing users.

Step 5 Click Save to save your changes to the Cisco ISE internal database.

http://www.cisco.com/en/US/docs/security/ise/1.2/user_guide/ise_man_id_stores.html#wp1407470

Re: REST API ACS vs ISE

Thomas Buergi — Wed, 06 Nov 2013 12:02:55 GMT

Hi Anas (& Daniel)

Actually I meant to create and delete Internal Users from outside the ISE GUI via REST API.

The use case is… that our external guest registration web platform is able to create and later delete temporary guest users.

But yes the problem is now solved because ISE V1.2 introduced the capabilities to create, update and delete internal users via REST API.

http://www.cisco.com/en/US/docs/security/ise/1.2/api_ref_guide/ise_api_ref_ers2.html#wp1117446