ISE as an LDAP server

[umahar]

Hi,

I have a customer who has appliances in storage & backup and other vendor applications that only support LDAP as an authentication method and they want to use RSA SecurID for authentication and also have the ability to check for groups.

As far as I know we do not send LDAP requests directly to ISE.

Can we get a confirmation that this is supported or not or if there is a way to achieve this via some proxy servers translating LDAP requests to Radius requests ?

[hslai]

Is LDAP the only auth available on those appliances? I would suggest to verify that. If that truly the case, it's best to ask the enhancements with the vendor(s) of appliances. Perhaps, you may consider Cut-Through and Direct ASA Authentication Configuration Example - Cisco or similar.

Unfortunately we can't confirm it as this is not a common use case for ISE.

Re: LDAP authentication using Radius suggested it possible with OpenLDAP.