cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
753
Views
0
Helpful
3
Replies

ISE - Identity group question

Jeppe Flensted
Level 1
Level 1

Is there a way to map external active directory groups to internal? Looks like I can only use internal groups in posture policy and client provisioning policy. Is that correct?

1 Accepted Solution

Accepted Solutions

Tarik Admani
VIP Alumni
VIP Alumni

Hi,

You can create the policy so that the ad external group attribute is a component of the policy.

When add a new condition on the left hand side select the advanced option, there you will see AD the select the external group attribute.

From there you can choose the operator followed by the value, which you selected in the groups tab under the Ad settings.

View solution in original post

3 Replies 3

Tarik Admani
VIP Alumni
VIP Alumni

Hi,

You can create the policy so that the ad external group attribute is a component of the policy.

When add a new condition on the left hand side select the advanced option, there you will see AD the select the external group attribute.

From there you can choose the operator followed by the value, which you selected in the groups tab under the Ad settings.

As always, thanks alot

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: