In reply to Anonymous.

Hello Anonymous,
ISE would have been used if we were providing differentiated services to users by their 'classification' - eg. Event Staff, Attendee, Speaker, World of Solutions Vendor, etc.
However, we did not break down traffic and access (policy) by user. That would have required device registration and assignment into policy groups (and AD groups). We were running the network pretty open as far as 'registration' went. You'll note there was no captive portal/BBSM-like service in place. This was intentional.

We did secure the network by VLAN/subnet. So if you were on the wireless 'ciscolive2013' network (and the associated VLAN), you were restricted from the show/NOC service network by the ASA. Other networks were only allowed to the Internet and no where else.

CiscoSecure ACS was used to provide the AAA/TACACS+ logins to the routers/switches and centralized login authentication to the various management applications that could source AAA/TACACS+.