ISE 1.4 Sponsor Users in AD

[Mokhalil82]

Hi

I am configuring ISE 1.4 for the first time. I have integrated Active Directory to ISE. In AD, is there a sponsor permission I can assign to certain AD users, so these users can become sponsors. I have seen documentation on how to local ISE user accounts to the sponsor group, but not anything about AD users.

Thanks

[jj27 · Accepted solution]

You can achieve this by creating a group in Active Directory (ex: Sponsor Users).  Add that group to your ISE configuration under Administration->External Identity Sources->Active Directory.  Click your join point and click on the Groups tab then find your AD group.

Then:

1. In ISE, go to Guest Access->Configure.
2. Click on Sponsor Groups.
3. Click "Create."
4. Click the "Members" button.
5. Select your newly added AD group.
6. Finish the configuration on the page.