Cisco ISE + Duo MFA + Windows AD Integration for WTI (Standard RADIUS)

WTI Knowledge Base • Authentication

Cisco ISE + Duo MFA + Windows AD Integration for WTI (Standard RADIUS)

Configure multi-factor authentication for WTI devices using Cisco ISE, Duo MFA, and Windows Active Directory. This guide covers Duo Push enrollment, the Duo Authentication Proxy, Cisco ISE policies, and WTI RADIUS settings. This version uses standard RADIUS between the WTI device and Cisco ISE.

What this guide covers

  • Windows Active Directory accounts and Duo Mobile enrollment.
  • Duo Authentication Proxy configuration for primary authentication and Duo MFA.
  • Cisco ISE identity sources, policy sets, and WTI authorization attributes.
  • Standard RADIUS on UDP port 1812 between WTI and Cisco ISE, including the shared secret and WTI RADIUS settings.

Configuration guide

Open the PDF for step-by-step instructions, configuration examples, and screenshots.

View Configuration Guide (PDF)

Use the IP addresses, account details, and settings appropriate for your environment when following the guide.