Cisco ISE: Configuring Identity Sources | Authentication Configuration Mismatch

Configuring Identity Sources: Examining Authentication Configuration Mismatch

Question

What happens when an internal user is configured with an external identity store for authentication, but an engineer uses the Cisco ISE admin portal to select an internal identity store as the identity source?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

D.

When an internal user is configured with an external identity store for authentication and an engineer uses the Cisco ISE admin portal to select an internal identity store as the identity source, the authentication process will fail. This is because the identity source selected in the Cisco ISE admin portal takes precedence over the one configured for the user.

In other words, the user's configuration specifies the external identity store as the source for authentication, but the administrator has overridden this configuration by selecting the internal identity store as the source.

As a result, when the user tries to authenticate, the authentication process will query the internal identity store selected by the administrator, which will not have the user's credentials. Therefore, authentication will fail.

In summary, the answer is C. Authentication fails.