Query on ISE Admin authentication via AD

[palv]

Currently ISE admins are logged in via internal admin user. Now customer want ISE admin authentication to happen via AD. My concern is after pointing to AD server  whether internal admin user can still able to login to ISE or only AD users can login to it. Please help in clarifying this doubt. Thanks in advance

[Jason Kunst · Accepted solution]

You can login with local or domain users if you have it configured that way

[palv]

Could you please let me know how to achieve it. Because i could see option either to select internal user or AD group to be under  ISE -> Admin access -> authentication type settings

[hslai]

With password-based external auth for admin, the internal will remain as a failback option.