Is it possible to map a Sponsor Group in Cisco ISE to a user group in Active Directory, through a RADIUS server?

[Rodrigo Moreno]

Hi!!

We are working on a mapping between a Sponsor Group in Cisco ISE and a user group in Active Directory....but the client wants the mapping to be through a RADIUS SERVER, for avoiding ISE querying directly the Active Directory.

I know it is possible to use a RADIUS SERVER as an external identity source for ISE.....but, is it possible to use this RADIUS SERVER for this sponsor group handling?

Thanks and regards!!

[Ravi Singh]

Yes It is possible to map Sponser group to user group in AD and if you want to know how to do please open the below link and go to Mapping Active Directory Groups to Sponsor Groups heading.

http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_guest_pol.html#wp1096365

[Richard Atkin · Accepted solution]

Hi Rodrigo,

The answer is no. There's no way to integrate Sponsor Portal config with a RADIUS Server. Your DB options for Sponsor Portal authentication are;

AD
LDAP
ISE Internal User DB

Sent from Cisco Technical Support iPhone App

[Rodrigo Moreno]

Yes you are right! There is no way to make the integration of Sponsor Portal with an external RADIUS.

thanks & regards