cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

498
Views
1
Helpful
4
Replies
Highlighted
Cisco Employee

ISE facebook integration

Hello team experts

We are planning to ingrate facebook for guest access in our SDA setup .

1. Do we need public IP for ISE to connect with facebook ?  how does ISE know user facebook login status ?

2. If we need public IP of ISE,  can it be a FQDN in the redirect URL ,  which is used for  user to resolve a internal IP and for facebook to resolve to a public IP ?

image001.png

thanks

Qingguo

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Cisco Employee

https://communities.cisco.com/docs/DOC-73960 has all the information needed

No public IP is needed

OAUTH determines login token status

View solution in original post

4 REPLIES 4
Highlighted
Cisco Employee

https://communities.cisco.com/docs/DOC-73960 has all the information needed

No public IP is needed

OAUTH determines login token status

View solution in original post

Highlighted
Cisco Employee

Adding to Jason's ...

On 1, ISE does not need a public IP for any of its interface. However, ISE does need allowed to initiate outbound connections to Facebook in the Internet.

On 2, ISE FQDN can resolve to a RFC 1918 address and Facebook will go to the real Facebook portal in the Internet.

Highlighted

Thanks hslai and Jason.

Any detailed call flow for facebook integration ?

Highlighted

I added some a pDF with screenshots to the bottom of this posting.

https://communities.cisco.com/docs/DOC-75003

Content for Community-Ad