cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
 
ISE 2.3 Patch 7 has been posted. This will be the last patch for the ISE 2.3 release!
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

554
Views
1
Helpful
5
Replies
Cisco Employee

ISE 2.2 One-Click Approval

Is there a way to utilize the schema options to map the email attribute to the UPN field? I have a customer that wants to use the one-click approval but the email attribute that is associated with the active directory user accounts are not being used. When they send emails out to users, they send it to the address within the UPN field.

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: ISE 2.2 One-Click Approval

How about this, under the user info attributes put the UPN in for email, this will map your UPN to the email address field on ISE

upn.png

5 REPLIES 5
Cisco Employee

Re: ISE 2.2 One-Click Approval

I will check, pretty sure the answer is no

https://communities.cisco.com/docs/DOC-70777

What type of accounts are able to use the single click with token?

The sponsor email address must be populated under the AD or LDAP account Email.

ISE AD/LDAP schema is already mapped out of box when configured.

Administration > Identity Management > External Identity Sources > Active Directory > domain > Advanced Settings > Schema

Cisco Employee

Re: ISE 2.2 One-Click Approval

How about this, under the user info attributes put the UPN in for email, this will map your UPN to the email address field on ISE

upn.png

Highlighted

Re: ISE 2.2 One-Click Approval

Using a custom schema doesn't work......I've opened a case at Cisco few weeks ago, it should be an enhancement in the future.

I can't use use the one click feature because of that :

ENH: One-Click approval does not work with the "Only accounts assigned to this sponsor" option.

CSCvd29533

This enhancement is not expected in the first patch. For me it's a bug since I can't use this feature.

Cisco Employee

Re: ISE 2.2 One-Click Approval

i checked with development and they said to try what I listed above

if not please list the bug you had for that

the other issues is known defect working with development on

Re: ISE 2.2 One-Click Approval

I've just received the BUG ID for the schema : CSCvd85620. It may not be visible at this time but it should be soon.


Apparently, they've released the one click feature without try it :-).