Cisco ISE 1.4 External Identity

[ibrahim_hassan]

I faced strange issue , the ISE can't retrieve groups assigned to the users?

for example , we assigned user=test in group=x

but in the ISE live authentication details for this user didn't reflect this and the user access id denied.

Anyone faced this issue?

[jan.nielsen]

Are you using AD or LDAP?

Can you select the group yu are talking about, under the external identity ?

Does the detailed view of the live authentications, show that ise is actually looking up groups ?

[ibrahim_hassan]

we are using AD,

yes we can select group

but , we can't see it on live authentication

[jan.nielsen]

So can you press details on one of the failed attempts you have seen, and post a screenshot of it? would like to see exactly what it's saying. Most importantly is the right side, where the authentication/authorization steps are