ISE RBAC question

[west33637]

when configuring ISE administrator access and leveraging AD external identity source to authenticate users- Is there a way to define an identity source sequence so that if ISE loses connection to AD the user can still authenticate using a secondary method?

the question is strictly related to RBAC. Thx

[nspasov]

You can't create/use an "identity store sequence" for the admin login. However, you don't really need to. At the login screen you can use the drop down menu and select "AD" or the "Internal Store" and either one would work. 

Give it a try and let me know if you have any issues.

Thank you for rating helpful posts!

[Venkatesh Attuluri]

Identity Source Sequences explained here

http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_man_id_stores.html#19445