ISE - Checks "RADIUS USERNAME" - Certificate or client config?

[jphilp]

Hi,

can anyone tell me if the "RADIUS USERNAME" attribute that ISE can use to check against is configured on a supplicant in its certificate or is it just configured within the security settings of a device?

[Aref Alsouqi · Accepted solution]

I think that is the username value that will be presented in the access request, so it is more a supplicant value than anything else.

[thomas]

Depends on the credential and the supplicant configuration.

It is using the certificate subject's Common Name for the RADIUS username when I do EAP-TLS.