Cisco ISE 3.3 Admin SAML with Vmware Workspace ONE Access on prem

[User42]

Hi everyone

Does anyone has experience of the SAML Integration ISE 3.3 with Vmware Workspace ONE Access on prem for Admin Login?
The forwarding to the IdP is working correctly but after login we get an 400 Bad request.
But it is forwarding to port 8443. Isn't this for the Guest Portal?

Also I don't know how to connect the groups from the IdP to the ISE.
Can anyone help here?

Thanks!

[ahollifield]

SAML should just be SAML but of course there are caveats and IdP "quirks".    WorkSpace One Access has not been tested with Cisco ISE, but no reason it shouldn't work as long as it is SAMLv2 compliant and uses base64 certificate encoding.

"

Cisco ISE is SAMLv2 compliant and supports all SAMLv2 compliant IdPs that use Base64-encoded certificates. The IdPs listed below have been tested with Cisco ISE:

• Oracle Access Manager (OAM)

• Oracle Identity Federation (OIF)

• SecureAuth

• PingOne

• PingFederate

• Microsoft Entra ID"

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/217342-configure-ise-3-1-ise-gui-admin-login-fl.html

https://www.cisco.com/c/en/us/support/docs/null/220241-configure-ise-3-1-gui-admin-login-using.html

https://www.cisco.com/c/en/us/td/docs/security/ise/3-3/admin_guide/b_ise_admin_3_3/b_ISE_admin_33_asset_visibility.html#concept_6878301F1F7C460585A4A267ECF77723