My customer wants to use RSA 2 factor authentication to authenticate into ISE admin portal. I have imported the sdconf.rec file already and change authentication to RSA SecurID under admin access. When I go under an admin group I am not able to see any external group to specify.
When I tried to authenticate an AD user with RSA pin it is not working.
External Authentication and Internal Authorization—The administrator’s authentication credentials come from the external identity source, and authorization and administrator role assignment take place using the local Cisco ISE database. This model is used for RSA SecurID authentication. This method requires you to configure the same username in both the external identity store and the local Cisco ISE database.