Task is:
New native client data is entered into SCCM and client needs access to the network in order to download patches etc. until the 802.X1 certificate is installed, which is the prime network access condition.
ISE will detect an unknown MAC address without a certificate and should then connect to SCCM and cross-check the existence of the MAC address in order to allow access without a certificate. (may be even just for a limited period)
I presume it can be done with a script using the API?
Can not find any documentation how this could be done.
Hints are welcome
