Azure MFA for ISE Tacacs+ usecase

[rameshkumarnakka]

Dear Team,

Can Anyone confirm or guide that can we achieve TACACS+ with Azure AD and Azure MFA

Thanks,

Ramesh

[Greg Gibbs]

No, this is not currently possible natively in ISE for multiple reasons.

• Device Admin (T+) is not currently supported with the ROPC/RESTID flow in ISE as there is no way to secure the PAP communications.
• Entra MFA is not compatible with ROPC as documented by Microsoft.
• The only way ISE has to interact with Entra MFA is via SAML, which is browser-based, hence the reason SAML is only supported for ISE Portal-based flows