[Solved] Ise does not match custom policy attributes!!!

Question

example
authentication policy
if guest - and -
device location starts with : building_1 then GuestAccess
everithing goes fine
but
if MicrosoftWorkstation - and -
device location starts with : building_1 and IdentityGroup:Name MATCH Guest then GuestAcces
does not work!!! (match starts with equals etc...)
or
if Guest  and -
device location starts with : building_1 AND IdentityGroup:Name MATCH Microsoft then GuestAcces
does not work!!! (match starts with equals etc...)
it doesn't even match the string "a" or "i" or "o"
this is to grant guest access only to microsoft workstation or apple devices after being profiled
what's the problem?

Answer 1

Hello Giuliano-
I have used the location field to build policies before and never had the problem. Can you provide some additional info:
What version of ISE are you using
Do you see a failed authentication in your live authentication window. If so can you post:
The reason for the failure
The detailed output of the failed attenuation. More specifically the output that contains all of the matched Radius attributes.