Multi-Factor Authentication on MAC

[bhisharm]

Hi Team,

Need your suggestion on how to achieve MultiFactor (AD and Machine Certificate using EAP Chaining) Authentication for Apple-MAC machine. I understand this is not officially supported, thus is their a workaround to achieve this

Regards

Bhishm

[Timothy Abbott · Accepted solution]

Hi,

EAP Chaining requires AnyConnect.  Unfortunately,  AnyConnect is not supported on macOS.  There is another option though.  You could use CWA Chaining as a work around.  With CWA Chaining, you authenticate the endpoint normally using 802.1X, then redirect the endpoint to a web portal on ISE for a second authentication.

Regards,

-Tim