cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

453
Views
0
Helpful
3
Replies
Highlighted
Beginner

ISE - Identity group question

Is there a way to map external active directory groups to internal? Looks like I can only use internal groups in posture policy and client provisioning policy. Is that correct?

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Advocate

Hi,

You can create the policy so that the ad external group attribute is a component of the policy.

When add a new condition on the left hand side select the advanced option, there you will see AD the select the external group attribute.

From there you can choose the operator followed by the value, which you selected in the groups tab under the Ad settings.

Tarik Admani
*Please rate helpful posts*

View solution in original post

3 REPLIES 3
Highlighted
Advocate

Hi,

You can create the policy so that the ad external group attribute is a component of the policy.

When add a new condition on the left hand side select the advanced option, there you will see AD the select the external group attribute.

From there you can choose the operator followed by the value, which you selected in the groups tab under the Ad settings.

Tarik Admani
*Please rate helpful posts*

View solution in original post

Highlighted

As always, thanks alot

Highlighted
Participant

Content for Community-Ad