User Login issue on Cisco ISE version 2.1.0.474

[faizan.khan]

User logs in to wireless network with correct(verified) AD credentails ISE throws "invalid password"
Checking through ISE guest logs I notice following error logged.

2018-09-18 08:34:41,331 ERROR [http-bio-172.16.113.45-8443-exec-4331][] guestaccess.flowmanager.step.guest.CredentialStepExecutor -:ex-tieto-tvanderhaar:- User (ex-tieto-tvanderhaar) login failed
2018-09-18 08:34:41,331 ERROR [http-bio-172.16.113.45-8443-exec-4331][] cpm.guestaccess.auth.authentication.NAAuthResultProcessor -:ex-tieto-tvanderhaar:- Can not find the authStoreGUID in the authenticated authentication Result!!

AD diagnostics done on ISE no problems found!

[Jason Kunst]

What version of ISE? Are you using the guest (CWA) portal?

Do you have AD allowed in your guest identity store ?

[faizan.khan]

What version of ISE? --- Cisco ISE version 2.1.0.474

Are you using the guest (CWA) portal? --- Yes

Do you have AD allowed in your guest identity store ? --- Yes

[Jason Kunst · Accepted solution]

This should work with the defaults as well. Can you log into the guest portal using an internal user or even a guest? Is your portal setup to use that store for the auth method (under guest portal settings). otherwise please engage the TAC to look at your system