I struggled to configure external authentication on a APIC-EM Controller, i followed the official cisco guide. According to the guide the radius server should return ‘Scope: Scope:ALL, Role:ROLE_ADMIN’ but this is wrong!

Correct is Scope=ALL: Role=ROLE_ADMIN

Before that i always got a ‘Invalid Login Credentials’, not the best error message 🙂