The request is invalid due to malformed syntax or invalid data

[rajitoor55]

As per this previous post, I can fix this error by matching authorization policy per ISE server . What dictionary attribute do i need to use to make this happen. And yes it works if I use the primary node only in domain but for failover we need both.

[hslai]

If you are referring to jan.nielsen's reply on ‎10-26-2016 09:36 AM US/Pacific, then the dictionary is Network Access and the attribute is ISE Host Name.