I'm doing CWA on ISE with an AD back end.
Is it possible to send successfully authenticated Users off to a different login-success page based on some aspect of their identity, whether that be a domain element in the username and/or by evaluating AD group membership? You used to be able to do this with some jiggery pokery on old versions of ISE, but I think it was more of an exploit than a feature.
For example, if "HR Person", send browser to HR.mycompany.com but if "IT Person", send browser to "IT.mycompany.com?
Configuring the client device is not an option; this all needs doing by the infrastructure.
Any ideas much appreciated!
You can't do that In a standard way.
If I get it I'll post it here.
Sorry to not being so helpful.
I suspect you're thinking of this?
Unfortunately I've been through this already and I don't think it gives enough access to do what I need.