WTI Knowledge Base • Authentication
Cisco ISE + OKTA MFA + Windows AD Integration for WTI (RADIUS over DTLS)
Configure multi-factor authentication for WTI devices using Cisco ISE, Okta MFA, and Windows Active Directory. This guide covers the Okta AD Agent, Okta RADIUS Agent, Okta Verify Push, Cisco ISE policies, and WTI RADIUS settings. This version uses RADIUS over DTLS between the WTI device and Cisco ISE.
What this guide covers
- Windows Active Directory integration through the Okta AD Agent.
- Okta RADIUS Agent configuration, application assignments, and Okta Verify Push.
- Cisco ISE identity sources, policy sets, and WTI authorization attributes.
- RADIUS over DTLS on UDP port 2083 between WTI and Cisco ISE, including certificate exchange and WTI secure settings.
Configuration guide
Open the PDF for step-by-step instructions, configuration examples, and screenshots.
View Configuration Guide (PDF)Use the IP addresses, account details, and settings appropriate for your environment when following the guide.