The Certificate Provisioning Portal allows users to enroll and provision certificates for devices as part of the Cisco Identity Services Engine (ISE) onboarding workflow. By configuring RSA Cloud Access Service (CAS) as the authentication provider, users can authenticate through RSA before accessing the Certificate Provisioning Portal and initiating certificate enrollment.

Procedure

1. Navigate to Administration > Device Portal Management > Certificate Provisioning. 
   
2. On the Certificate Provisioning Portal page, under Portal Behavior and Flow Settings, expand Portal Settings. 
3. In the Authentication method drop-down list, select the RSA External Identity Source that was created earlier.
   Note: A new Identity Source Entity should be created separately, specifically for the Certificate Provisioning Portal.