Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

ISE sponsor portal guest accounts

I am having an issue with guest accounts that have been created in the sponsor portal, some accounts work fine but others show up in the authentication logs on ISE as error 22056.  This error points to ISE not looking in the right identity store but when you go deeper into the details all auth requests are pointing at the internal users store which is correct.

My main problem is that when I try to look at these accounts from the ISE admin console to see if there is any difference between them they do not show up i.e. no accounts that are created on the sponsor portal are displayed in the internal users database but if you try to create an account with the same user name ISE says that there is already an account with that name.

Is there any where on ISE to display the sponsor guest accounts?

Regards

Craig

  • Other Wireless - Mobility Subjects
1 ACCEPTED SOLUTION

Accepted Solutions
Bronze

ISE sponsor portal guest accounts

Hi,

To view guest accounts, you have to go through the sponsor portal. However, could you try the following in the admin account to see if you can view the guest accounts:

1. Go to Administration --> Identity Management ----> Groups

2. Under User Identity Groups, click on Guests. Guests is the default built-in group, unless you created a separate guest group.

3. Check to see if the guest accounts created by the sponsor shows up.

Normally, when a guest account is created by a Sponsor, the account must be assigned to Group role and this Group role is where guest credentials created by the sponsor are stored.

7 REPLIES
Bronze

Re: ISE sponsor portal guest accounts

what is your version of ISE?

Are you using the guest accounts to do 802.1x auth?

Sent from Cisco Technical Support iPad App

New Member

ISE sponsor portal guest accounts

Hi,

    we are using version 1.1.3.  We are not using Dot1X just the guest web portal functionality.  A sponsor creates a guest account and then the guest user logs in with it and is just authenitacted gainst the internal ISE database.

thanks

Craig

New Member

ISE sponsor portal guest accounts

New Member

ISE sponsor portal guest accounts

Hi,

    not too sure if I am missing something but this just tells you how to use the sponsor portal? my query was based around being able to see all user accounts i.e. accounts created in the sponsor portal and from the admin from the admin console in the admin console.

If I web browse to the ISE admin console and the go to administration-Identities I can only see the accounts that I have created through ISE admin, if I try and create an account that I know exists on the sponsor portal ISe complains that the user already exists but you cannot view it.  This seems very odd, why wouldn't an admin be able to see all accounts?

thanks

Craig

Bronze

ISE sponsor portal guest accounts

Hi,

To view guest accounts, you have to go through the sponsor portal. However, could you try the following in the admin account to see if you can view the guest accounts:

1. Go to Administration --> Identity Management ----> Groups

2. Under User Identity Groups, click on Guests. Guests is the default built-in group, unless you created a separate guest group.

3. Check to see if the guest accounts created by the sponsor shows up.

Normally, when a guest account is created by a Sponsor, the account must be assigned to Group role and this Group role is where guest credentials created by the sponsor are stored.

New Member

ISE sponsor portal guest accounts

Hi,

    Thank you for the information.  I definitley can't view the guest accounts created by the sponsor portal but if this is how it is supposed to be.........

I sgtill think it is crazy that the admin wouldn't be able to see all accounts that are in the database.

thanks

Craig

Bronze

ISE sponsor portal guest accounts

Hi,

I would advise that you contact Cisco TAC for clarification.

Cheers

436
Views
0
Helpful
7
Replies
This widget could not be displayed.