AD authentication in ACS 5.3

[neil.adair]

Hi, I have a new ACS 5.3 installation which I have joined to our AD Domain and added the directory groups into.  I have also added all our devices into ACS and their groups etc but I am still only able to authenticate on the our switches with an internal ACS account, when I try with an external AD account the log shows the following error   "Subject not found in the applicable identity Store (s)"

Any ideas on what I am missing ?

Thanks

[jrabinow]

Did you select AD as the result in the indetity policy

Assuming this is for RADIUS and you have the default policies installed you should go to:

Access Policies > Access Services > Default Network Access > Identity

Click on default and select AD as identity source and then press "Save Changes"