Cisco Cisco Identity Services Engine 2.1 Manual Técnica

Contents

Introduction

Prerequisites

Requirements

Components Used

Conventions

Flow Overview

Expected flow for this use case:

Configure

Step 1. Prepare ISE to use an external SAML Identity Provider

Step 2. Configure the Guest portal to use an external Identity Provider

Step 3. Configure PingFederate to act as an Identity Provider for ISE Guest Portal

Step 4. Import IdP Metadata into ISE External SAML IdP Provider Profile

Verify

Troubleshoot

Related Information

Introduction

This document describes how to configure Cisco Identity Services Engine(ISE) version 2.1 to
provoide Single Sign On(SSO) capabilities for guest portal users through Security Assertion
Markup Language(SAML).

Prerequisites

Requirements

Cisco recommends that you have knowledge of these topics:

Cisco Identity Services Engine guest services.

●

Basic knowledge about SAML SSO.

●

Components Used

The information in this document is based on these software and hardware versions:

Cisco Identity Services Engine version 2.1

●

PingFederate 8.1.3.0 server from Ping Identity as SAML Identity Provider(IdP)

●

The information in this document was created from the devices in a specific lab environment. All of
the devices used in this document started with a cleared (default) configuration. If your network is
live, make sure that you understand the potential impact of any configuration applied.

Conventions