ISE TACACs / MFA Using Google Authenticator and Azure Active Directory

[klauerma]

Just wondering if we are capable of supporting ISE MFA in TACACs= using Google Authenticator and Azure Active Directory Services?

[paul]

As long as the solutions support a local RADIUS server acting as a proxy to their service any MFA solution will work.  ISE would point to the service as an external RADIUS server and then process the authorization once the MFA piece is run.

[Damien Miller]

I think a road block here might be google cloud authentication not supporting radius being sent to it, not sure if that changed.

[paul]

Yeah in the past when I have researched this I found this link:

https://www.supertechguy.com/help/security/freeradius-google-auth/

But never had a reason to test the solution or if this support has been removed.