You can use Cisco ISE to apply different settings (CoA) to different users/devices based on Certificate Template Name. For instance, devices with Template Name X get QoS Platinum, whereas devices with Template Name Y get QoS Silver.
I was unable to match an Authorization Rule based on Certificate Template Name in ISE 2.1 Patch 3.
There is a bug on version 1.3 for this issue.
However, the issue appears to be resolved in version 2.2. Although, I did not see it listed as resolved in the Release Notes.
Screenshots of the Other Attributes section of the Authentication Details page for the same client.
|ISE 2.1 Patch 3||ISE 2.2|