Two factor authentication for admin access

[olbraun]

Hi guys, 

For a big IOT project the customer is asking for options to do 2 factor authentication for the device admins. If I understand this document correctly it is possible to use RSA SecureID if you configure external Authentication against an internal identitiy store:

https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_23_chapter_0101.pdf

Can someone please confirm that 2fa is possible for the admin user and which options we have? The latest community thread is from 2016, figured there might be an update.

Thanks a lot in advance! :) 

[hslai]

See Solved: MFA for ISE admin access? - Cisco Community

[hslai · Accepted solution]

Your requirements seem for Network Device Admin access instead of that for ISE admin web portal. In that case, please read

• Using DUO with ISE 2.3 and ACS 5.X for 2FA Cisco Network Admin Access - Cisco Community
• How to use Duo with Cisco TACACS - Using Duo / Advanced Configs - Duo Security Community