Failure Reason : 22017 DenyAccess Identity Source selected

[adaka1adaka]

I just setup a new ACS1120 with ACS 5.1. I am able to authenticate via TACACS+/Active Directory from cisco switches but unable to authenticate using RADIUS/Active Directory from a wireless client. I get the error "Failure Reason : 22017 DenyAccess Identity Source selected" when I check the ACS5.1 log. My setting is supposed to use AD1 for the Identity Store Sequence. I do not know where the DenyAccess Identity Source is coming from.

Please help.

[jrabinow · Accepted solution]

This error ocurs because the identity policy you have defined has resulted in a result of deny access.

You should review the authentication details to see which access service matched and then which idenity policy rule.

You can see this information in theuthentication details in Monitoring and Troubleshooting infromation

[adaka1adaka]

Thanks jrabinow. That works!