Getting errors when trying to integrate Spectrum with with Cisco ISE via RADIUS or TACACS+.

Products

• Network Observability
• Spectrum

Issue/Introduction

Attempting to use using CISCO ISE for authentication and testing it using a new "policy server" under the admin page in Spectrum.

When inputing the server / hostname and port, then scrolling to the bottom of the page to try to test the Spectrum authentication failover of one of the policy servers, it fails with the following message:

SPC-OCA-10120: Input Error : SPC-OCA-10319: Valid Policy Servers must be specified

Environment

DX NetOps Spectrum all currently supported releases

Cause

Spectrum does not directly integrate with Cisco ISE via RADIUS or TACACS+.

Resolution

Instead of daisy-chaining Spectrum through ISE, the standard best practice is to configure both platforms to point to the exact same external identity provider (IdP).

• LDAP / Active Directory (AD): You can configure Spectrum to authenticate users directly against your AD/LDAP server. Cisco ISE can be integrated with this exact same AD domain, ensuring credentials and group access remain centralized.

• SAML 2.0 (Single Sign-On): If you are using a modern identity provider (like Entra ID, Okta, Duo, or PingIdentity), you can configure SAML authentication for both Spectrum and ISE independently.

Supported IdPs are listed under:

TechDocs : DX NetOps Spectrum 25.4 : SAML2 Authentication - Supported IdPs