How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Cisco Identity Services Engine Activedirectory API

The activedirectory API from Cisco Identity Services Engine — 29 operation(s) for activedirectory.

Cisco Identity Services Engine Activedirectory API is one of 197 APIs that Cisco Identity Services Engine publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Active Directory. The published artifact set on APIs.io includes an OpenAPI specification and API documentation.

This API exposes 33 operations across 29 paths, and defines 32 schemas. It is described by OpenAPI 3.2.0, at version 1.0.

Requests are made against a single base URL, https://{server}:{port}/ers/config.

33 operations 29 paths 32 schemas 2 DELETE7 GET2 POST22 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.0
Base URL
https://{server}:{port}/ers/config
Authentication
HTTP Basic
Resource Areas
1

Authentication & Security 1

Cisco Identity Services Engine Activedirectory API declares 1 security scheme for authenticating requests. It accepts HTTP basic authentication (HTTPBasicAuthentication).

Paths & Operations 33

Across 29 paths, the API surfaces 33 operations — 2 DELETE, 7 GET, 2 POST, 22 PUT. Each is listed below with its method, path, parameters, and response codes.

activedirectory 33
GET
/activedirectory/
Get all join points
5 params → 200400401403404406415
POST
/activedirectory/
Create join point
body → 201400401403404406415500
PUT
/activedirectory/{id}/passiveIdSettings
Updates passive ID settings
1 param body → 200400401403404406415500
PUT
/activedirectory/{id}/addGroups
Load groups from domain
1 param body → 204400401403404406415500
PUT
/activedirectory/{id}/getUserGroups
Get user groups
1 param body → 200400401403404406415500
GET
/activedirectory/name/{name}
Get-By-Name
1 param → 200400401403404406415
PUT
/activedirectory/{id}/getTrustedDomains
Get trusted domains
1 param → 200400401403404406415500
PUT
/activedirectory/{id}/leaveAllNodes
Leave a domain with all nodes
1 param body → 204400401403404406415500
PUT
/activedirectory/{id}/join
Join a domain
1 param body → 204400401403404406415500
PUT
/activedirectory/{id}/joinAllNodes
Join a domain with all nodes
1 param body → 204400401403404406415500
PUT
/activedirectory/{id}/getDomainUsers
Get domain users
1 param body → 200400401403404406415500
PUT
/activedirectory/{id}/isUserMemberOf
Is user a member of groups
1 param body → 200400401403404406415500
PUT
/activedirectory/{id}/getGroupsByDomain
Get groups by domain
1 param body → 200400401403404406415500
GET
/activedirectory/{id}
Get join point details
1 param → 200400401403404406415
DELETE
/activedirectory/{id}
Delete join point
1 param → 204400401403404406415
PUT
/activedirectory/{id}/leave
Leave a domain
1 param body → 204400401403404406415500
PUT
/ers/config/activedirectory/{id}/getDomainUsers
Get all domain users
4 params body → 200
PUT
/ers/config/activedirectory/{id}/passiveIdSettings
Update passive ID settings
4 params body → 204
GET
/ers/config/activedirectory/name/{name}
Get Active Directory by name
3 params → 200
PUT
/ers/config/activedirectory/{id}/getUserGroups
List groups of which given user is member
5 params body → 200
PUT
/ers/config/activedirectory/{id}/addGroups
Reload domain groups configuration from Active Directory into Cisco ISE
4 params body → 200
PUT
/ers/config/activedirectory/{id}/leave
Make Cisco ISE node leave Active Directory domain
5 params body → 200
PUT
/ers/config/activedirectory/{id}/isUserMemberOf
Verify if user is member of given groups
5 params body → 200
PUT
/ers/config/activedirectory/{id}/getTrustedDomains
Get list of domains that are accessible through given join point via trust relationships
4 params → 200
PUT
/ers/config/activedirectory/{id}/joinAllNodes
Join all Cisco ISE Nodes to Active Directory domain
5 params body → 200
PUT
/ers/config/activedirectory/{id}/leaveAllNodes
Make all Cisco ISE nodes leave Active Directory domain
5 params body → 200
PUT
/ers/config/activedirectory/{id}/getGroupsByDomain
List the groups of given domain
5 params body → 200
GET
/ers/config/activedirectory/{id}
Fetch join point details by ID.
4 params → 200
DELETE
/ers/config/activedirectory/{id}
Delete AD join point from Cisco ISE
5 params → 204
PUT
/ers/config/activedirectory/{id}/join
Join Cisco ISE node to Active Directory domain
5 params body → 200
POST
/ers/config/activedirectory
Create AD join point in Cisco ISE
4 params body → 201
GET
/ers/config/activedirectory
List all join points for Active Directory domains in Cisco ISE
3 params → 200
GET
/ers/config/activedirectory/versioninfo
Get Active Directory version information
→ 200

Schemas 32

The contract defines 32 schemas that model the data the API accepts and returns. The most detailed are activedirectoryResponseEntity (11 properties), ERSActiveDirectory_name (10 properties), ERSActiveDirectory_2 (10 properties), ERSActiveDirectory (10 properties). Each schema is shown below with its type and property counts.

ERSActiveDirectory_name
object
10 properties
UpdatedFieldsResponse
object
1 property
Link
object
3 properties
getbyname
object
1 property
ERSGroups
object
1 property
version
object
3 properties
activedirectoryListResponseEntity
object
4 properties
updatedField
object
3 properties
link1
object
3 properties
domain-response
object
1 property
additionalData1
object
2 properties
VersionInfo
object
1 property
additional
object
1 property
ERSResponse
object
2 properties
activedirectoryResponseEntity
object
11 properties
ERSDomains
object
1 property
ERSActiveDirectoryGroups
object
1 property
SearchResult
object
2 properties
ersActiveDirectoryDomainsResponse
object
1 property
ERSActiveDirectory
object
10 properties 2 required
activedirectoryListResponse
object
1 property
ersActiveDirectoryGroupsResponse
object
1 property
domain-response1
object
1 property
OperationAdditionalDataEntity
object
1 property
ERSActiveDirectory_2
object
10 properties
activedirectory
object
1 property
activedirectoryResponse
object
1 property
search
object
1 property
OperationAdditionalData
object
1 property
identitystores.activedirectory
object
1 property 1 required
ERSActiveDirectoryDomains
object
1 property
additionalData
array

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

cisco-ise-activedirectory-api-openapi.yml Raw ↑

Other APIs Cisco Identity Services Engine publishes across the network.

Cisco Identity Services Engine Acct Status API
Cisco Identity Services Engine Acct Status TT API
Cisco Identity Services Engine ACI Connection API
Cisco Identity Services Engine ACI Data API
Cisco Identity Services Engine Acibindings API
Cisco Identity Services Engine Acisettings API
Cisco Identity Services Engine Active Directories API
Cisco Identity Services Engine AD Groups API
Cisco Identity Services Engine Admin Groups API
Cisco Identity Services Engine Admin Users API
Cisco Identity Services Engine Adminuser API
Cisco Identity Services Engine Adresourcereservation API
Where this information came from

This is an independent, third-party profile of Cisco Identity Services Engine Activedirectory API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.