Limit the sponsor in creating only 1 account

[techmgr.aballesteros1]

Hello gentlemen,

I have used this community and it has been very helpful in my ise environment deployment.

I have one specific requirement but couldn't seem to figure it out. Sought and read info from this community but don't have answer to my specific requirement.

Question is regards to Sponsor Portal, I would like to ask question on:  How to limit the sponsor in creating only 1 account?

In the attached screenshot, I don't want to let them create more than one account, which in this case I don't want the "iuser11"to be created but only limited to one account which is the "iuser1 ".

Thanking you in advance for your kind assistance.

[kthiruve · Accepted solution]

You have to use sponsor group in ISE

Go to Workcenter > Guest > Portals and Components and tweak the the settings under sponsor group.

-Krishnan

[techmgr.aballesteros1]

Hi @kthiruve ,

Thanks for the response, yeah that page also helped me to tweak other things I wanted for my portal to look like ommitting some other tabs/inputbox/etc that i don't want to be seen.

[Jason Kunst]

Please provide more specifics.

Do you want only 1 user at a time?
Or 1 user only ever?
Or only a specific user only

Seems to be unclear

[techmgr.aballesteros1]

Hi @Jason Kunst , it will be  1 user only ever.

[Jason Kunst · Accepted solution]

To clarify further. You are locking a sponsor to only creating 1 user ever? That’s not possible sorry.
It would be good to understand why such a requirement is needed?

You could make your own feature use the http://cs.co/ise-api and a web server to host it

[techmgr.aballesteros1]

Hi @Jason Kunst , 

That is really helpful to know. Maybe I am just being way too creative, I have created a group of people who can add their device without going to reception/helpdesk (the designated sponsors). In short like a self register sponsor to their selves.

But I have started looking at your link you've sent me and this one https://www.cisco.com/c/en/us/td/docs/security/ise/1-4/api_ref_guide/api_ref_book/ise_api_ref_guest.pdf

Will keep the community posted so others may know as well.

Thanks!

[Jason Kunst]

If this is about users adding their devices then why not go with the my devices portal. You can restrict them to one device

They would use internal or external accounts (AD)