×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

ISE - Identity group question

Answered Question
Aug 11th, 2012
User Badges:

Is there a way to map external active directory groups to internal? Looks like I can only use internal groups in posture policy and client provisioning policy. Is that correct?

Correct Answer by Tarik Admani about 5 years 1 week ago

Hi,


You can create the policy so that the ad external group attribute is a component of the policy.


When add a new condition on the left hand side select the advanced option, there you will see AD the select the external group attribute.


From there you can choose the operator followed by the value, which you selected in the groups tab under the Ad settings.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Tarik Admani Sat, 08/11/2012 - 16:16
User Badges:
  • Green, 3000 points or more

Hi,


You can create the policy so that the ad external group attribute is a component of the policy.


When add a new condition on the left hand side select the advanced option, there you will see AD the select the external group attribute.


From there you can choose the operator followed by the value, which you selected in the groups tab under the Ad settings.

Actions

This Discussion

Related Content