cancel
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 
cancel
1217
Views
2
Helpful
3
Replies

subject Common name attribute in Cisco ISE conditions not found

ramziabdelhak
Level 1
Level 1

Hi everybody,

I want to check the Certificate's Subject Common Name attribute in authorization conditions, but all i can find is the Issuer Common name, is there a workaround ?

Thanks in advance 

3 Accepted Solutions

Accepted Solutions

Greg Gibbs
Cisco Employee
Cisco Employee

What version of ISE are you using? Where are you looking for this attribute?

I use a matching condition against the Subject - Common Name in some of my AuthZ Policies in ISE 3.1 (currently patch 6) and it works as expected.

Screenshot 2023-05-31 at 8.52.28 am.png

View solution in original post

What version of ISE are you using, and have you tried another browser to make sure it's not browser related?

When creating a new authorization condition, if I select "CERTIFICATE" from the Dictionary drop down menu, I can select from a number of attributes to choose from, including both issuer common name and the certificate subject common name.

So it should definitely be available to you.

JonatanJonasson_0-1685487067108.png

 

 

---
Please mark helpful answers & solutions
---

View solution in original post

ramziabdelhak
Level 1
Level 1

Thanks to every one, i found the attribute, it was not under the certificate section, but rather the subject section " the user icon " where all user related attribute " including in the certificate " are located. By the way, i am on a :

Version: 2.7.0.356
Patch Information: 2,5

ramziabdelhak_0-1685520989010.png

 Thank you all once again

View solution in original post

3 Replies 3

Greg Gibbs
Cisco Employee
Cisco Employee

What version of ISE are you using? Where are you looking for this attribute?

I use a matching condition against the Subject - Common Name in some of my AuthZ Policies in ISE 3.1 (currently patch 6) and it works as expected.

Screenshot 2023-05-31 at 8.52.28 am.png

What version of ISE are you using, and have you tried another browser to make sure it's not browser related?

When creating a new authorization condition, if I select "CERTIFICATE" from the Dictionary drop down menu, I can select from a number of attributes to choose from, including both issuer common name and the certificate subject common name.

So it should definitely be available to you.

JonatanJonasson_0-1685487067108.png

 

 

---
Please mark helpful answers & solutions
---

ramziabdelhak
Level 1
Level 1

Thanks to every one, i found the attribute, it was not under the certificate section, but rather the subject section " the user icon " where all user related attribute " including in the certificate " are located. By the way, i am on a :

Version: 2.7.0.356
Patch Information: 2,5

ramziabdelhak_0-1685520989010.png

 Thank you all once again