Integrate AD in ISE and login to DNA Center with AD Account

[ahmedaburaihan]

Hello Community!

Is there anyway that Active Directory should be integrated to ISE and AD User could login to DNA Center with the help of ISE?

Because ISE is normally connected/integrated to DNAC and AD cannot be directly connected to DNAC. So how to login an AD User to DNAC?

Thank you in Advance!

[balaji.bandi]

When you integrate ISE and DNAC

and ISE use external source for the user using AD - the DNAC you can login using AD account.

https://www.hospitableit.com/howto/cisco-dna-center-external-authentication-using-ise-tacacs-part-1/

ISE and AD :

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/217351-ad-integration-for-cisco-ise-gui-and-cli.html

[Gaurav Kansal]

Dear Ahmed,
You can configure ISE as TACACS server and integrate ISE with your AD. You can then configure DNAC with your TACACS server for login.
GoodLuck..

[Haydn Andrews]

Use TACACS authentication to DNAC from ISE, have TACACS use AD accounts 

[ahmedaburaihan]

can we also use RADIUS? Is there any guide to follow? thanks. 

[Haydn Andrews]

Sure can
https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/dna-center/220666-configure-radius-external-authentication.html 

This is if ISE is your RADIUS server but the same works for other RADIUS servers