topic Re: Single sign-on (SSO), Active Directory (AD), Cisco Wireless Contro in Wireless

Single sign-on (SSO), Active Directory (AD), Cisco Wireless Controller

Mahadi Hasan — Wed, 15 Mar 2023 05:15:11 GMT

What is the exact process of single sign-on (SSO) using Active Directory (AD) for Cisco wireless controller 9800 (WLC)?

Re: Single sign-on (SSO), Active Directory (AD), Cisco Wireless Contro

Sandeep Choudhary — Wed, 15 Mar 2023 07:06:04 GMT

Do you have RADIUS or TACACS server like Cisco ISE, if yes then follow this posts:

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/214490-configure-radius-and-tacacs-for-gui-and.html

Regards

Dont forget to rate helpful posts

Re: Single sign-on (SSO), Active Directory (AD), Cisco Wireless Contro

Mahadi Hasan — Wed, 15 Mar 2023 08:07:02 GMT

Thank you for your response! It was really very helpful .You asked if we have RADIUS or TACACS server. But unfortunately we have none of them. In this project we have microsoft active directory already in the production and our plan is to integrating WLC 9800 with that active directory with Single Sing-on service.I think LDAP is also needed here. can you please share more info about this ?

Re: Single sign-on (SSO), Active Directory (AD), Cisco Wireless Contro

Mark Elsen — Wed, 15 Mar 2023 08:12:03 GMT

- FYI : https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/216744-configuring-catalyst-9800-wlc-with-ldap.html

Re: Single sign-on (SSO), Active Directory (AD), Cisco Wireless Contro

Mahadi Hasan — Wed, 15 Mar 2023 09:11:07 GMT

Thank you for your wonderful response! AD and LDAP integration process with WLC9800 is clearly showed in the given document! But there is no information including Single Sign-on service. Can you share about this?

Re: Single sign-on (SSO), Active Directory (AD), Cisco Wireless Contro

Rich R — Thu, 16 Mar 2023 11:46:44 GMT

The WLC just uses the configured authentication service to authenticate the user.

Single sign-on is a generic umbrella term for using a single central source of identity/authentication (eg AD) for multiple different services consumed by users so that's entirely up to you - nothing to do with the WLC.

Using LDAP to authenticate WiFi users to AD is an example of implementing a single sign-on solution because you're using a single userid to authenticate Windows and WiFi users.

Re: Single sign-on (SSO), Active Directory (AD), Cisco Wireless Contro

Mahadi Hasan — Thu, 16 Mar 2023 06:09:16 GMT

Thanks for the response! So I'm trying to enable AD authentication for wlc and will share the further update!