Does ISE supports MFA

[sujanyakj]

Do ISE supports MFA, if yes do we need to purchase any license for it .

[balaji.bandi]

ISE a Identity engine for AAA Service, for MFA you need different source for authentication ?

 Do ISE supports MFA   - what context ? to access ISE GUI ?

[sujanyakj]

Hi @balaji.bandi ,

Thanks for responding. We have integrated ISE with DNAC. Right now we are authenticating DNAC using TACACS policy sets (  ISE in our environment we are using only for network device authentication).
Need some suggestion is there any way we can utilize ISE for MFA solution to access DNAC , do we need any extra license for that purpose.

[balaji.bandi]

No you do not need any License, you need to configure MFA using ISE for device authenticaiton.

MFA is depends what you want to for - people use below :

1. SAML

2. Google authenticator

3. 3rd party authenticator using Mobile app for authentication.

check this network flows :

https://community.cisco.com/t5/networking-knowledge-base/two-factor-authentication-for-cisco-digital-network-architecture/ta-p/3837175

[MHM Cisco World]

You it can support MFA like Duo. 

For license I will check. 

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/ise-duo-better-together-aag.html

MHM