Cisco ISE 2.7 strip whitespace from begin/end of username?

[adnovum]

Hello,

We are using ISE 2.7 with AnyConnect on ASA for VPN access authorization and posture compliance checks.

Recently we had a strange case with one user whose account was not found in active directory when she tried to login with AnyConnect, but with the AD test user it could be found. It took quite a while for me to dig through the logs and find that the user had accidentally entered a space at the end.

Is it possible on ISE to strip any whitespace from the beginning or end of a username?

Regards,

Bernd

[Marvin Rhoads · Accepted solution]

I don't thinks so. ISE can do identity rewrite ...but for other purposes - such as to add or remove a domain name.

https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ise_27_admin_guide/b_ISE_admin_27_asset_visibility.html#concept_477DBF7BF0164628B0F2A471CEF445D5