Fetch OU from AD to ISE 3.1

[osman869]

Hello,

ISE can only fetch the groups under AD. Is there any way ISE can see the OU from the AD?

Thanks,

[Milos_Jovanovic · Accepted solution]

Hi @osman869,

AFAIK, not nativelly, or not like you would use AD groups. Instead, you can use attribute distinguishedName and match it in condition later. Here is a great config guide on this subject. However, please bare in mind that it is not recommended to use OU, as @hslai explained here.

Kind regards,

Milos