To support the integration of Cisco ISE with a Cisco Mobility Services Engine (MSE) and a Wireless LAN Controller (WLC) for restricting access based on the location of a patient, the MAP Location option must be selected in the Authorization Profile in Cisco ISE.
The MAP Location option allows Cisco ISE to leverage location information provided by the MSE.
This ensures that authorization policies are dynamically applied based on the endpoint's physical location, such as restricting access to patient records to specific rooms in the hospital.