topic Guest flow and non-uniq guest user's e-mail/phone number in Network Access Control

Guest flow and non-uniq guest user's e-mail/phone number

cMiCrhot — Wed, 22 Mar 2017 19:26:21 GMT

Hello everybody!

We are implementing guest flow with self-registered guest users on ISE 2.1.

Guest users are redirected to our Self-Registered Guest Portal. On the portal users are able to successfully add new guest accounts. It works like a charm.

But during our test we discovered that we were able to create several guest user accounts with non uniq e-mail addresses and phone numbers. Actually all our test users have the same e-mail and phone.

The question - is it possible to deny such possibility? I.e. all guest user accounts have to have uniq e-mail address and uniq phone numbers.

I've checked the documentation and not able find solution for it. Only one possible way is to use sponsored guest portal to allow sponsor user to check for uniqueness of e-mail address and phone number. But it is not desirable solution for the customer.

Is it possible with to achieve with Self-Registered Guest Portal?

With best regards,

Maxim Zimovets

Re: Guest flow and non-uniq guest user's e-mail/phone number

Jason Kunst — Wed, 22 Mar 2017 19:54:05 GMT

So you’re asking that I can only create 1 account using the same phone number or email address?

Example create guest account 1 with joe@cisco.com<mailto:joe@cisco.com>

When I try to create guest account 2 with joe@cisco.com<mailto:joe@cisco.com> that it will fail

If that’s the case its not current capability. Please reach out to ISE-PM team for feature request.

Re: Guest flow and non-uniq guest user's e-mail/phone number

cMiCrhot — Wed, 22 Mar 2017 20:23:20 GMT

Yes, Jason, I need to check guest user account e-mail/phone and not allow creation of 2 accounts with the same e-mail/phones.

Thank you for confirmation of my thoughts.

Maxim

Re: Guest flow and non-uniq guest user's e-mail/phone number

gbekmezi-DD — Wed, 22 Mar 2017 22:36:59 GMT

You could probably achieve this by making the email address or phone number the user name.

Re: Guest flow and non-uniq guest user's e-mail/phone number

Jason Kunst — Thu, 23 Mar 2017 15:50:44 GMT

Good point thanks, this might be a workaround

replace the phone with email, unfortunately it wouldn't work for both

ISE Guest Self-Registration phone number as the username