Cisco Identity Services Engine

Cisco Identity Services Engine Active Directory API

The Active Directory API from Cisco Identity Services Engine — 29 operation(s) for active directory.

Documentation GitHub OpenAPI

Business capability

Identity & Access Management BC-620.20

Operations 33

GET /activedirectory/ Get all join points #

POST /activedirectory/ Create join point #

PUT /activedirectory/{id}/passiveIdSettings Updates passive ID settings #

PUT /activedirectory/{id}/addGroups Load groups from domain #

PUT /activedirectory/{id}/getUserGroups Get user groups #

GET /activedirectory/name/{name} Get-By-Name #

PUT /activedirectory/{id}/getTrustedDomains Get trusted domains #

PUT /activedirectory/{id}/leaveAllNodes Leave a domain with all nodes #

PUT /activedirectory/{id}/join Join a domain #

PUT /activedirectory/{id}/joinAllNodes Join a domain with all nodes #

PUT /activedirectory/{id}/getDomainUsers Get domain users #

PUT /activedirectory/{id}/isUserMemberOf Is user a member of groups #

PUT /activedirectory/{id}/getGroupsByDomain Get groups by domain #

GET /activedirectory/{id} Get join point details #

DELETE /activedirectory/{id} Delete join point #

PUT /activedirectory/{id}/leave Leave a domain #

PUT /ers/config/activedirectory/{id}/getDomainUsers Get all domain users #

PUT /ers/config/activedirectory/{id}/passiveIdSettings Update passive ID settings #

GET /ers/config/activedirectory/name/{name} Get Active Directory by name #

PUT /ers/config/activedirectory/{id}/getUserGroups List groups of which given user is member #

PUT /ers/config/activedirectory/{id}/addGroups Reload domain groups configuration from Active Directory into Cisco ISE #

PUT /ers/config/activedirectory/{id}/leave Make Cisco ISE node leave Active Directory domain #

PUT /ers/config/activedirectory/{id}/isUserMemberOf Verify if user is member of given groups #

PUT /ers/config/activedirectory/{id}/getTrustedDomains Get list of domains that are accessible through given join point via trust… #

PUT /ers/config/activedirectory/{id}/joinAllNodes Join all Cisco ISE Nodes to Active Directory domain #

PUT /ers/config/activedirectory/{id}/leaveAllNodes Make all Cisco ISE nodes leave Active Directory domain #

PUT /ers/config/activedirectory/{id}/getGroupsByDomain List the groups of given domain #

GET /ers/config/activedirectory/{id} Fetch join point details by ID #

DELETE /ers/config/activedirectory/{id} Delete AD join point from Cisco ISE #

PUT /ers/config/activedirectory/{id}/join Join Cisco ISE node to Active Directory domain #

POST /ers/config/activedirectory Create AD join point in Cisco ISE #

GET /ers/config/activedirectory List all join points for Active Directory domains in Cisco ISE #

GET /ers/config/activedirectory/versioninfo Get Active Directory version information #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/cisco-ise-active-directory-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Cisco Ise Activedirectory API
  x-evidence:
  - type: source
    url: https://pubhub.devnetcloud.com/media/identity-services-engine-api-v1/docs/
  - type: source
    url: https://developer.cisco.com/docs/identity-services-engine/
  x-provenance:
    method: harvested
    authored_by: Cisco
    harvested_by: API Evangelist
    harvested_on: '2026-08-19'
    first_party: true
    provider_published: true
    source_host: pubhub.devnetcloud.com
    note: 103 ISE API descriptions (1,490 operations; 32 OpenAPI 3.0.x + 71 Swagger 2.0) enumerated from Cisco's own DevNet project manifest and fetched anonymously. Byte-identity reconfirmed 2026-08-19 by SHA-256 against the live source.
  version: '1.0'
  description: 'Operations tagged activedirectory across 2 of this provider''s published API definitions: cisco-ise-ers-open-api-ers-apis.yaml, cisco-ise-legacy-ers-active-directory.yaml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://{server}:{port}/ers/config
  description: Append /ctsapi/v2 or /ctsapi/v3 to above URL while accessing CTS APIs
  variables:
    server:
      description: The host where the API is rooted
      default: localhost
    port:
      description: The port no for CTS APIs is 9063 and for other APIs it is 443
      default: '443'
tags:


# --- truncated at 32 KB (137 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/cisco-ise/refs/heads/main/openapi/cisco-ise-active-directory-api-openapi.yml