Cisco ISE 2.1 Patch 5 - did any one come across ISE PSN nodes are sending FQDN requests for authentication?

[Pradeep S.R.]

Hi I am dealing with one strange issue anyone come across this ?

In ISE Radius logs user are getting authenticated with user name like abcd but AD server receiving request as abcd@xyz.com ! but no issues for user AAA function. But AD audit logs reporting as bad username request as it is receiving request as abcd@xyz,com(FQDN) instead of abcd

#CiscoISE #ISEExternalIdentity.

[hslai · Accepted solution]

abcd@xyz.com is a userPrincipalName (UPN) but not FQDN. The latter is for DNS.

I believe you might be hitting this known issue -- CSCvf45991 -- as UPN should have worked.