topic Re: ISE-2.6-Self Service/Password Change Portal Not Working in Network Access Control

ISE-2.6-Self Service/Password Change Portal Not Working

nspasov — Fri, 17 May 2019 16:50:33 GMT

I was trying to get a Self-Service/Password Change portal based on the instructions provided in the thread below but I am not able to get it working:

https://community.cisco.com/t5/identity-services-engine-ise/ise-password-change-portal-ucp-with-my-devices-portal/td-p/3475680/page/2

I created the portal several times but the page after a successful login never loads. Instead, it just goes to a blank screen so I never get to see the "Change Password Screen" The URL that loads shows:https://192.168.40.106:8443/mydevicesportal/LoginSubmit.action?from=LOGIN
Removing the Javascript that hides the unnecessary pages "fixes" and the post-login page loads fine so perhaps the Javascript code does not work with ISE 2.6
I tried this with Chrome, Firefox and IE.

Re: ISE-2.6-Self Service/Password Change Portal Not Working

Jason Kunst — Fri, 17 May 2019 17:05:44 GMT

I see you posted this query in 2 places , can you delete the comment to the other page and will see how we can correct.

Re: ISE-2.6-Self Service/Password Change Portal Not Working

nspasov — Fri, 17 May 2019 17:13:10 GMT

I posted in the original thread in case someone else came across it. I just tried to delete the comment but I don't seem to have that functionality. However, I did update the comment to reference this thread in case someone runs into the same issue and visits the original thread.

Re: ISE-2.6-Self Service/Password Change Portal Not Working

Jason Kunst — Fri, 17 May 2019 17:20:44 GMT

Thanks will have someone look, did you try adjusting the delay?

Re: ISE-2.6-Self Service/Password Change Portal Not Working

nspasov — Fri, 17 May 2019 17:37:01 GMT

Thank you Jason! I did play with the delay to prevent the "My Devices" page from appearing but that did not fix the post-login screen issue.

Re: ISE-2.6-Self Service/Password Change Portal Not Working

nspasov — Tue, 28 May 2019 16:22:29 GMT

Hi Jason. I wanted to see if you had an update for this issue. Thank you!

Re: ISE-2.6-Self Service/Password Change Portal Not Working

Jason Kunst — Tue, 28 May 2019 18:23:41 GMT

still working on it. I would also connect internally with the PMs if you haven't already to see if they can put an actual feature request on roadmap for this portal.

Re: ISE-2.6-Self Service/Password Change Portal Not Working

Jason Kunst — Thu, 06 Jun 2019 14:37:46 GMT

We are working on tweaking this offline, here is the current fix

Please try this

Please check the below script in the following 3 pages in My devices portal customization.

1 ) Login Page

============

$(document).on('pageshow', function() {

sessionStorage.setItem('passwordChanged', false);

});

</script>

2) Change Password page

======================

setTimeout(function(){

sessionStorage.setItem('passwordChanged', false);

$('#ui_changepwd_cancel_button').attr('href', 'javascript&colon;document.forms["logout"].submit()');

$('#ui_changepwd_submit_button').on('click', function(evt){

sessionStorage.setItem('passwordChanged', true);

});

}, 1000);

</script>

3) My Devices page

==================

$(document).on('pageshow', function() {

$('.ui-panel-content-wrap').hide();

var error = $('.cisco-ise-errors');

var hasErrors = error.length > 0;

var passwordChanged = sessionStorage.getItem('passwordChanged') == "true";

if (!hasErrors && passwordChanged) {

alert('Password has been changed');

sessionStorage.setItem('passwordChanged', false);

document.forms['logout'].submit();

}

else if (!passwordChanged){

document.forms['changePasswordPreLoad'].submit();

}

});

</script>

Thanks,

Sivakami.

Re: ISE-2.6-Self Service/Password Change Portal Not Working

nspasov — Wed, 05 Jun 2019 17:04:08 GMT

Hi Jason and thank you for the update. Apologies for the delayed reply on my end as I was traveling. The new scripts got me in a better place where the portal loads correctly and I was able to perform a password change. The only missing/broken piece now is the "Success Page" after a successful password change. At the moment, the portal just loads a blank page when a successful password change is performed. If there are any errors, the portal loads fine informing the user of the errors that required to be corrected.

Not sure if this is related but the little preview window for "My Devices" that is located on the right hand side of the window shows a 404 Error:

Re: ISE-2.6-Self Service/Password Change Portal Not Working

elucatello — Wed, 18 Sep 2019 13:18:00 GMT

I've used the API web app available on this thread and it's better then the BYOD workaround and it's also free.

https://community.cisco.com/t5/identity-services-engine-ise/how-to-create-a-password-change-portal-ucp-on-ise-using-api/td-p/3926245

Re: ISE-2.6-Self Service/Password Change Portal Not Working

javier437 — Tue, 29 Oct 2019 12:57:41 GMT

Where you able to resolve the 404 error?

Re: ISE-2.6-Self Service/Password Change Portal Not Working

elucatello — Tue, 29 Oct 2019 17:06:49 GMT

javier437, I'd suggest you to use the API/Python of the post below.

Re: ISE-2.6-Self Service/Password Change Portal Not Working

Jason Kunst — Thu, 31 Oct 2019 17:56:39 GMT

you cannot do a preview of a complex portal page script

Re: ISE-2.6-Self Service/Password Change Portal Not Working

javier437 — Thu, 31 Oct 2019 17:59:48 GMT

Jason once a user changes their password all they get is a blank screen. The password does get changed and that works with no problem, really the only issue here is that there is no confirmation that it was changed successfully.

Re: ISE-2.6-Self Service/Password Change Portal Not Working

Jason Kunst — Fri, 01 Nov 2019 13:09:37 GMT

What version are you using

Re: ISE-2.6-Self Service/Password Change Portal Not Working

javier437 — Fri, 01 Nov 2019 13:14:24 GMT

I am using version 2.6.0.156.

Re: ISE-2.6-Self Service/Password Change Portal Not Working

Jason Kunst — Fri, 01 Nov 2019 15:13:28 GMT

thanks we are looking into it

Re: ISE-2.6-Self Service/Password Change Portal Not Working

Jason Kunst — Thu, 07 Nov 2019 19:05:13 GMT

I am working on a new write-up in next few days on how to address this holistically

Re: ISE-2.6-Self Service/Password Change Portal Not Working

javier437 — Mon, 02 Dec 2019 23:14:16 GMT

Jason have you been able to work on that write up to resolve this issue?

Re: ISE-2.6-Self Service/Password Change Portal Not Working

Jason Kunst — Tue, 03 Dec 2019 17:43:06 GMT

@javier437 wrote:

Jason have you been able to work on that write up to resolve this issue?

For now try this. I will working on fixing the updated portal as well

change password in sponsor portal

Here is the code for Change password customization in sponsor portal.
 
Can you please try the below script in the Sponsor portal customization --> Create Account for Known Guests --> Instructional Text
 
<script>
    var pwdBtnDisplayed = false;
    $(document).on('pageshow', function() {
        $('.cisco-navbar').remove();       
        $('.create-guest-type-step').remove();       
        $('.create-guest-info-step').hide();
        $('.create-access-info-step').hide();
        if(!pwdBtnDisplayed){
            for(var i=0; i<5 ; i++){
                $('.ui-listview').children()[0].remove();
            }
        }
        if(!pwdBtnDisplayed){
            $('.cisco-nav-content').append('<center><input onclick="changePasswordFn()" target="_self" type="button" value="Password Change"/></center>');
            pwdBtnDisplayed = true;
        }    
        window.addEventListener('resize', function(){
            if(window.innerWidth < 960){
                removeMedisqueryCSS();
            }
        });
    });
    function changePasswordFn (){
        location.href='#changePwd';
    }
 
    function removeMedisqueryCSS() {
        if (typeof window.CSSMediaRule !== "function") return false; //Your browser doesn't support media query feature
        var s = document.styleSheets,r, i, j, k;
 
        if (!s) return; //no style sheets found
        // walk throuth css sheets
        for (i = 0; i < s.length; i++) {
            // get all rules
            r = s[i].cssRules;
            if (!r) continue;
 
            for (j = 0; j < r.length; j++) {
                //If there's a rule for media query
                if (r[j] instanceof CSSMediaRule){
                    if((r[j].media.mediaText).indexOf("60em") < 0){
                        for (k = 0; k < r[j].cssRules.length; k++) {
                            r[j].deleteRule(r[j].cssRules[k]);
                        }
                    }
                }
            }
        }
    }
</script>

for my devices portal ISE 2.4

Enable Change password and disable Post-Login Banner Page and AUP from the settings. Try to add the below code in Optional Content 2 of the respective pages. In the below code, highlighted Portal id should be changed according to your portal.

Change Password page
=====================
<script>
    $('#ui_changepwd_submit_button').on('click', function(evt){
        sessionStorage.setItem('passwordChanged', true);
    });
 
    $(document).on('pageshow', function() {
        var logoutAction = '';
        $('a').each(function(){
            if($(this).attr('href').indexOf("Logout") !== -1){
                logoutAction = $(this).attr('href');
            }
        });
        $('a[href="HomePreLoad.action?from=MY_DEVICES_HOME"]').attr('href', logoutAction);
        var passwordChanged = sessionStorage.getItem('passwordChanged') == "true";
        if (passwordChanged) {
            alert('Password has been changed');
            sessionStorage.setItem('passwordChanged', false);
            var logoutUrl = $('[href="Logout.action?portal=582293e0-011a-11ea-88a9-e2ae93fcfd8a"]').attr('href');
            window.location = logoutUrl;
        };
    });
</script>
 
My Devices page
===============
<script>
    setTimeout(function(){
        $('.ui-panel-content-wrap').hide();
        $('.ui-link-inherit').first().click();
    }, 100);
</script>

ISE 2.6 code for my devices

ISE version 2.6
 
Enable Change password and disable Post-Login Banner Page and AUP from the settings.
Try to add the below code in Optional Content 2 of the respective pages.
 
Login Page
============
<script>
    $(document).on('pageshow', function() {
        sessionStorage.setItem('passwordChanged', false);
    });
</script>
 
Change Password page
====================
<script>
    setTimeout(function(){
        sessionStorage.setItem('passwordChanged', false);
        $('#ui_changepwd_cancel_button').attr('href', 'javascript&colon;document.forms["logout"].submit()');
        $('#ui_changepwd_submit_button').on('click', function(evt){
            sessionStorage.setItem('passwordChanged', true);
        });
    }, 1000);
</script>
 
My Devices page
===============
<script>
    $(document).on('pageshow', function() {
        $('.ui-panel-content-wrap').hide();
        var passwordChanged = sessionStorage.getItem('passwordChanged') == "true";
         if (passwordChanged) {
             alert('Password has been changed');
             sessionStorage.setItem('passwordChanged', false);
            document.forms['logout'].submit();
        }
        else if (!passwordChanged){
            document.forms['changePasswordPreLoad'].submit();
        }
    });
</script>
 
 
To remove the dropdown/pulldown in the right side corner of the change password page, please use the below script in the Optional content 2 of Change Password page. This will be applicable for both 2.4 as well as 2.6 versions.
 
<script>
    setTimeout(function(){
                var deskUser = $(".cisco-desktop-header-menu-button").text();
                $(".cisco-desktop-header-menu-button").remove();
                $(".cisco-mobile-header-menu-button").remove();
                var infoiconDesc = $(".cisco-desktop-menu-button")[0].outerHTML
                $(".cisco-desktop-menu-button").replaceWith('<div class="ui-btn-right">'+deskUser+infoiconDesc+'</div>');
                $('.ui-btn-icon-notext .ui-btn-inner .ui-icon').css('margin','16px 1px 2px 3px');
    }, 1000);
</script>