Implementing and Configuring Cisco Identity Services Engine (SISE) — Question 311

An administrator must change the authentication method from local accounts to SAMIL for wireless guest users in a Cisco ISE deployment. Using the SAML protocol, the guest portal must be configured to authenticate employees with an external identity provider server. These configurations were performed:

• created a secondary self-registered guest portal for SAML integration
• created a primary guest portal for wireless guest users
• configured all the required settings on the SAML identity provider server
• imported IdP metadata to the Cisco ISE SAML identity provider profile

Which two actions must be taken? (Choose two.)

Answer options

• A. Create employee accounts in the Sponsor portal.
• B. Create a SAML identity provider in ISE.
• C. Configure the Sponsor portal
• D. Configure the SAML identity provider in authentication method for the secondary guest portal.
• E. Configure the SAML identity provider in authentication method for the primary guest portal.

Correct answer: D, E

Explanation

The correct actions are D and E because the SAML identity provider needs to be configured as the authentication method for both the secondary and primary guest portals to allow proper authentication for wireless guest users. Options A, B, and C are not necessary for the SAML integration process described.