Authenticate on ISE using UPN and not SAM

[JPavonM]

Hi experts,

I'm new into ISE and wonder if there is a way to only accept connections from wireless devices using 802.1x-PEAP by using UPN (email address) and not the ones using SAM (pre-Windows 2000 logon).

Regards.

[Greg Gibbs · Accepted solution]

My first thought would be to simply create an authentication policy that matches on the UPN suffix. If the session does not match that, it will hit the Default authC policy, which would be set for DenyAccess.