topic ISE - Sponsor Approved Guest Access in Network Access Control

ISE - Sponsor Approved Guest Access

User42 — Fri, 05 Apr 2024 16:39:00 GMT

Hi everyone

In all Tutorials, there is the following procedure for Sponsor Approved Guest Access:

The Guest register himself -> Sponsor get Notified and approve -> User get his credentials

Is there a way to change that?
The Guest register himself -> User get Credential (account is inactive) -> Sponsor get Notified and approve -> account gets enabled

Thanks in advance!

Re: ISE - Sponsor Approved Guest Access

Arne Bier — Sun, 07 Apr 2024 20:40:24 GMT

I don't believe there is such an option. Cisco has taken the approach that is more logical and efficient.

Re: ISE - Sponsor Approved Guest Access

icarimo — Thu, 20 Feb 2025 22:54:36 GMT

Hello,
I would like to validate if the following setup is possible.
- To have a Guest SSID with Cisco ISE guest portal Self Registered with Sponsor approval without the need to guest insert credentials.
I would like to have the following flow:

Guest is redirected to guest portal and register itself
Sponsor user receives an email to approve guest request
Guest is automatically register without the need to insert credentials

I know if the guest is in "waiting menu" and sponsor approves the guest is automatically authorized.
But if for some reason the guest leave this page or the sponsor approves only after 30min, the automatic approves does not work.

Another scenario, that I would like to validate is, how can I ensure that Guest user do not require to insert the credentials in the next days? in WLC I can only configured the session timeout for maximum of 1 day. I saw some documentation regarding the feature "remember me" that basically checks the MAC address inside the Guest endpoints group.

Is there another way to ensure that guest user will never need to insert the credentials after the sponsor approval during 7 days?