Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

ISE - Identity group question

Is there a way to map external active directory groups to internal? Looks like I can only use internal groups in posture policy and client provisioning policy. Is that correct?

Everyone's tags (1)
1 ACCEPTED SOLUTION

Accepted Solutions

ISE - Identity group question

Hi,

You can create the policy so that the ad external group attribute is a component of the policy.

When add a new condition on the left hand side select the advanced option, there you will see AD the select the external group attribute.

From there you can choose the operator followed by the value, which you selected in the groups tab under the Ad settings.

Tarik Admani *Please rate helpful posts*
3 REPLIES

ISE - Identity group question

Hi,

You can create the policy so that the ad external group attribute is a component of the policy.

When add a new condition on the left hand side select the advanced option, there you will see AD the select the external group attribute.

From there you can choose the operator followed by the value, which you selected in the groups tab under the Ad settings.

Tarik Admani *Please rate helpful posts*
Community Member

ISE - Identity group question

As always, thanks alot

Community Member

ISE - Identity group question

390
Views
0
Helpful
3
Replies
CreatePlease to create content