Per Cisco doc below, you should be able to. What you need to configure depends on what you are trying to achieve. If you would like to get user identity in the traffic log as well as using identity in access policy, then you need both realm and user agent. If you have ISE, user agent would then be redundant.

You are not allowed to view links. Register or Login