cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
386
Views
20
Helpful
2
Replies

ISE 3.2 EAP-TLS Azure AD permission error

seankin
Beginner
Beginner

We are implementing Azure AD EAP-TLS authentication on ISE 3.2 using the following guide: 

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/218197-configure-ise-3-2-eap-tls-with-azure-act.html

We have hit an issue where in the rest-id-store.log we are getting the following error (Insufficient privileges to complete the operation):

,799 ERROR [http-nio-9601-exec-5][[]] cisco.ise.ropc.utilities.RestUtility -::::- Error response in 'GET' request. Status - '403'. Error - '{"error":{"code":"Authorization_RequestDenied","message":"Insufficient privileges to complete the operation

In the ISE 3.2 demonstration video, the same error occurs and the presentor is unable to get it working (Time 29.40) and does not provide any resolution:

https://www.youtube.com/watch?v=857hIkxkEAU

Has anyone managed to get this working and solve the 403 permission error or does EAP-TLS on 3.2 not work?

1 Accepted Solution

Accepted Solutions

thomas
Cisco Employee
Cisco Employee

Yes, I included the solution in the Show Notes of that YouTube video  8-)

The permissions problem in the demo was 1 additional API Permission in Azure Active Directory was required to make it work. The 3 required permissions are
- Group.Read.All
- User.Read
- User.Read.All  ◁◁◁ This was missing!

ISE 3.2 - Azure AD Permissions for EAP-TLS.png

View solution in original post

2 Replies 2

thomas
Cisco Employee
Cisco Employee

Yes, I included the solution in the Show Notes of that YouTube video  8-)

The permissions problem in the demo was 1 additional API Permission in Azure Active Directory was required to make it work. The 3 required permissions are
- Group.Read.All
- User.Read
- User.Read.All  ◁◁◁ This was missing!

ISE 3.2 - Azure AD Permissions for EAP-TLS.png

Brilliant! Thank you

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers