ISE admin login through AD after upgrading to 2.2

[aous.salloum]

Hi Guys, 

we have upgraded ISE from 1.4 to 2.2 after which some Admins are not able to login to ISE GUI 

getting the following errors 

- Authentication failed You are required to change your password in external identity source

some other users users are getting 

Authentication failed due to zero RBAC Groups

eventhough the priviliegaes are the same as with other users that are able to login 

any thoughts ?

thanks

Aous

[ajc · Accepted solution]

There is an RBAC issue on 2.2 and the 1.4 configuration for admin access is NOT passed into 2.2 transparently (I made EXACT the same upgrade and got the same issue and more). Second, you CANNOT customize your own admin access profiles, based on the bug you can only work with the existing and default ones on 2.2 Let me provide you some screenshots with what I had to do.

BTW, I STRONGLY recommend you to use 2.3 instead of 2.2.

[ajc]

Next the picture sequence. There are new concepts on 2.2 that were not present on 1.4