Strip @domain on AD Integration with Cisco ISE?

[kmittal]

Hi there ,

How can I strip @domain realm from username through ISE with AD being used as external Identity Source. Username is being used in

username@domain format.

Thanks Kumar

[Richard Atkin]

You can try to do things like Proxy-RADIUS-To-Self, which allow you to manipulate Username fields, but they only seem to work on the outer RADIUS wrapper and not on the inner method, which is the bit that gets sent to AD... So my understanding is that ISE can't do this today.

[jrabinow · Accepted solution]

This is now supported in ISE 1.2 patch 4; recently posted to CCO:

CSCuj95908         ISE does not domain stripping for AD external store