Authorization policy on Cisco ISE 1.4 as UPN and sAMAccountName are different

[Capricorn]

Hi!

I am using EAP-TLS for user authorization and its checking the AD security group. The issue is that ISE is checking certifcate where I have firstname.lastname@mycompany.com which is the certifcate issued to as I can see on mmc but my user id i.e.  sAMAccountName is different so ISE policy doesnt work.

What can be done to achieve that I can use EAP-TLS for user athorization?

Thanks

[Capricorn · Accepted solution]

I just look into this and I think one can use different attributes so I am closing this.