Follow the instruction steps in this section to apply your SSO Agent or Relying Party to Cisco ISE Guest Portal.
Sign into Cisco ISE Admin GUI and go to Administration > Identity Management > External Identity Sources > SAML ID Provider and click Add.
Enter the name for your IdP (Cloud, Identity Router, or Relying Party), depending on the implementation, then click Submit.
Go to Work Centers > Guest Access > Portals & Components > and choose your Guest Portal (Self Registered or Sponsored Guest Portal), then go to Portal Settings > Authentication method and choose the SAML Identity Provider created in Step 2.
Go to the SAML Identity Provider and select the Service Provider Info tab. It should generate the Metadata file based on choosing the Guest Portal by itself, as shown in the image and click Export.
After importing the Metadata further into RSA Cloud Console in the next step, you may need to change the FQDN to the IP address of the interface that will be used as per Step 3 in both the Connection URL and ACS URL.
Choose the SAML configuration from the following that you would like to complete: