move TACACS users to AD in ISE 2.4

[BigK]

I am newbie to ISE still in training . I would like to know how to move users that use their TACACS accounts to start using their AD accounts. 

Thanks

Karim

[Mohammed al Baqari · Accepted solution]

You need to create external identity source pointing to AD then create a
policy set to match tacacs requests and point to external identity source

[BigK]

@Mohammed al Baqari

Thanks Mohammed!. you made it sounds easy. would you mind directing me to an example that I can follow. 

Thanks again!

Karim

[Mohammed al Baqari · Accepted solution]

This example covers A-Z.

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/200208-Configure-ISE-2-0-IOS-TACACS-Authentic.html

If your question is answered, please mark the question as answered

[BigK]

it looks promising. I will tested see how it goes. I was on that page earlier, but since 2.3 is slightly different I was not sure.

Thanks again!

Karim