ISE 2.3. Device Administration with MFA

[Muhammad Zahid]

Using Cisco ISE 2.3, how to setup device authentication(AAA) services with MFA(PortalGuard) 
PortalGuard is integrated with Active directory so we need different authorization polices for AD users/groups as required.

[Jason Kunst · Accepted solution]

i don't think there is an existing document for this, with your research please share what you find. Checking with the vendor and writing up a doc to share. i have found some examples here of other vendors

https://www.google.com/search?q=ise+mfa+tacacs&oq=ise+mfa+tacacs&aqs=chrome..69i57j0l2j69i64.2495j1j7&sourceid=chrome&ie=UTF-8

Here's a general doc as well

https://community.cisco.com/t5/security-documents/two-factor-authentication-on-ise-2fa-on-ise/ta-p/3636120

I have forwarded to our sme @kthiruve as well but likely something new you would have to work on