ISE 2.2 TACACS+ and OTP Integration

[rroulhac]

Team,

Do we have the ability to suport One Time Passwords with TACACS+?

Do we have any documentation of supported OTP venders?

--

Grace and Peace,

Robert E Roulhac Jr

Virtual Systems Engineer II

Cisco TSN (Technical Solutions Network)

rroulhac@cisco.com

Office: 919.5745455

[hslai · Accepted solution]

Yes, ISE inherits T+ with OTP from ACS.

Table 7 of Cisco Identity Services Engine Network Component Compatibility, Release 2.2

shows,

Token Servers
RSA ACE/Server	6. x series
RSA Authentication Manager	7. x and 8. x series
Any RADIUS RFC 2865-compliant token server	—

[rroulhac]

Does this mean any OTP server that supports RFFC2865 We should be able to integrate with no issues?

Am I correct in assuming the following: Because the customer is currently using ACS, and they are migrating to ISE, the OTP server they are using (Microsoft MFA) should definitely be supported in ISE?

Just want to be clear before communicating a definitive answer.

--

Grace and Peace,

Robert E Roulhac Jr

Virtual Systems Engineer II

Cisco TSN (Technical Solutions Network)

rroulhac@cisco.com

Office: 919.5745455

[Timothy Abbott]

Hi Robert,

Yes, any RFC2865 compliant solution will work.

Regards,

-Tim