Basically, what we want to do is assign an endpoint (using MAC address) to an identity group via API.
We tried the API guide to create an endpoint. However, if ISE has already learned the MAC address for some reason (e.g. device has already tried to authenticate), the API returns the below error:
{
"ERSResponse": {
"operation": "POST-create-endpoint",
"messages": [
{
"title": " Unable to create the endpoint. Endpoint \"XX:XX:XX:XX:XX:XX\" already exists.",
"type": "ERROR",
"code": "CRUD operation exception"
}
Which makes sense because the endpoint has already been created. We tried to use the API guide to register an endpoint but that requires the endpoint ID. So this would involve different steps:
1. Use an API call to get the endpoint ID
2. Use the endpoint ID to register the device to the identity group using the Group-ID
Is this correct?
Can anyone help what is the right process to register an already created endpoint to an identity group via API?