Login to ISE PIC using AD credentials

[sampathss]

Hello,

Is there a way to login to ISE PIC UI using AD credentials? Not sure there is any option to configure the Authentication method as AD, like it has in the Full ISE.

Thanks

Sampath

[gbekmezi-DD]

I don’t believe so. You have to buy base licenses.

[sampathss]

So installing the base license would bring back the authentication method? So the feature exists today where they can use AD to login to PIC UI, right?

[gbekmezi-DD]

Installing the base license converts it from PIC to standard ISE.

[sampathss]

So In that case, with being on PIC, there is no option at this point to use AD to login. Is that a fair statement?

[kvenkata1]

Yes. Please see ISE-PIC FAQ

- Krish

[thomas]

ISE PIC should work the same as ISE for RBAC administrator login.

Please read Administrative Access to Cisco ISE Using an External Identity Store

Once you join ISE to your AD domain you should be able to use your AD groups for Administrator logins & RBAC:

Then under Administration > System > Admin Access > Adminstrators > Admin Groups:

[sampathss]

Thomas,

This is not Full ISE and just the ISE-PIC which does not have all the options as Full ISE to map the External ID sources.

The customer has to install a full ISE in order to leverage the AD authentication functionality.

[aklyuchk · Accepted solution]

Unfortunately, you just do not have a place to specify external identity source in PIC. Also there is no RBAC only admin authentication. Please see below:

[sampathss]

That is correct Andrey, ISE PIC does not have that option, which would be good to have for sure.

[thomas]

I submitted this thread as a PIC feature request to use AD for Admin UI for authentication & RBAC.

[sampathss]

Thank you Thomas.