Cisco ISE authentication Using LDAP + OTP ( external server that sends SMS To the User )

[Drthrax]

Hi , 

I am deploying ISE to Posture VPN users ( ASA is the NAD ). 
I want the users to be authenticated using LDAP ( which is already configured in ISE ) in addition I want the User to receive an OTP via SMS using an external server . Can this be done and if yes kindly state the document or procedure 

thank you ! 

ISE : 2.6  

[balaji.bandi]

here is the reference thread : (hope that helps you)

https://community.cisco.com/t5/security-documents/configure-two-factor-authentication-on-asa-for-cisco-anyconnect/ta-p/3403768

https://community.cisco.com/t5/network-access-control/ise-tacacs-authentication-with-2fa-through-sms-gateway/m-p/3939820

[Drthrax]

Hi , Thank you for the reply ,
Actually I want to do authentication on both ISE ( LDAP )and the external Source that will send an OTP via SMS .
Do you think this is feasible ?
The links u sent are using are mainly using ASA to do 2FA , and the second is for complete authentication with external server .

[balaji.bandi]

Let me look what i have posted is correct or not.

your requirement is VPN authenticated with Radius (here is ISE+LDAP) MFA you want to be SMS is this correct.

The URL has information for Multifact authentication, you can use Duo for the same.

here is another reference : (hope this should help you)

https://www.grandmetric.com/2017/03/31/vpn-remote-access-with-multi-factor-authentication-experience-case-study/

https://community.cisco.com/t5/network-access-control/anyconnect-vpn-with-2-factor-authentication-on-ise/m-p/3464708#253445