Is it possible to configure duo MFA with ISE using its internal users

[anis.ghorayeb]

Hello,

Is it possible to configure duo MFA with ISE using its internal users for authentication, not using external sources like AD ?

[balaji.bandi]

is this for device admin or VPN users : 

check below guide for device admin using ISE Local users :

https://community.cisco.com/t5/security-knowledge-base/duo-mfa-integration-with-ise-for-tacacs-device-administration/ta-p/3882063

Note : Most use cases uses external source - like AD will be easy for managing users and making policies correctly.

i would recomend good video :

https://www.youtube.com/watch?v=daj4KqaeNNE

[DuoKristina]

You might want to try this recently released Duo API integration in ISE 3.3 P1. It does not require use of the Duo Authentication Proxy.

https://www.cisco.com/c/en/us/td/docs/security/ise/3-3/admin_guide/b_ise_admin_3_3/b_ISE_admin_33_segmentation.html?bookSearch=true#integrate-duo-with-cisco-ise