EAP-MSCHAPv2 support with AD using LDAP broker

[mulatif]

Hi,

As per the below document (Page 12)

https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_011…

EAP-MSCHAPv2 is supported with AD and not with LDAP.

However I have a customer, who are evaluating to do ISE and AD integration through a LDAP directory broker service (i.e. add AD as an LDAP Server) instead of the 'native join', which is the more common way to do it.

In the above case, does the supported authentication table is still applicable ? i.e. EAP-MSCHAPv2 is not going to be supported even though the back-end is still AD and only the join method has changed.

Thanks,

Naman

[mulatif]

This is the LDAP directory broker product https://www.radiantlogic.com/products/radiantone-vds-standard-edition/

[hslai · Accepted solution]

Yes, the support table is applicable to any ID store configured as a LDAP ID source in ISE.