ISE internal user authentication failure - user not found

[yong khang NG]

Hi Forumers'

I trying to do wireless 802.1x, where identity store using intenral user.

But i found this error message when i trying to connect

Authentication failed                                                                                 :

22056 Subject not found in the applicable identity store(s)

My authrorization rules is built like this

identity groups = user identities group / " mygroup"

condition = no setting

permissions = standard / PermitAccess

Question 1

Any troubleshooting step to do on this?

Question 2

For the Authorization rules, what's the condition should set for using Internal User as Identity store?

Thanks

Noel

[jrabinow · Accepted solution]

The error is caused to an authentication failure and is not an issue with authorization

You need to look at your authentications policy (Policy->Authentications) and see which identity store was authenticated against

In addition can do the Live Authentications page (Monitor->Authentications) and for the failing record click on the icon under details. This will give you the full details of the requets processing and you can see which rule was matched in the identity policy (Identity Policy Matched Rule) and "Selected Identity Stores".