API: ISE 2.3 -> Self-Registered Guest Portal -> trying to update the "Require a registration code" value

[Michal Juzwa]

Hi guys,

Getting this:

I can use any number (valid or not) as Portal ID and the result is always the same.

Is there any workaround?

Thanks,

-Michal

[paul]

You are using the wrong ID.  You first need to make a API call to the portal Get-All.  Then parse those results for the portal you want to find it's ID.  Then use that ID to make a call specifically to that portal.  This is the nature of almost all the ISE REST API calls.  All the objects have unique IDs that you first must obtain from the Get-All call.

[Michal Juzwa]

I did that, also checked the ID directly on ISE. The Portal ID is 100% correct.

I tried all the Portal ID's I have, same error.

Bug?

[paul]

Paste in your API call with results for the Get-All request.

[Michal Juzwa · Accepted solution]

Found the issue:  I have only updated the URL with the Portal ID, forgot to update the BODY. This went through but now have other problem:

"Updating SelfRegistartion Portal By ID (f0ae43f0-7159-11e7-a355-005056aba474) failed due to The same domain cannot be in both black and white list address configuration."

Not sure why as I have two different:

<?xml version="1.0" encoding="UTF-8"?>
<ns0:selfregportal xmlns:ns0="portal.ers.ise.cisco.com" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:ns1="ers.ise.cisco.com" xmlns:ers="ers.ise.cisco.com" description="description" id="f0ae43f0-7159-11e7-a355-005056aba474" name="Self-Registered Guest Portal (default)">
<settings>
<selfRegPageSettings>
         <accountValidityDuration>1</accountValidityDuration>
         <accountValidityTimeUnits>days</accountValidityTimeUnits>
         <approveDenyLinksTimeUnits>days</approveDenyLinksTimeUnits>
         <assignGuestsToGuestType>michal</assignGuestsToGuestType>
         <aupDisplay>asLink</aupDisplay>
         <authenticateSponsorsUsingPortalList>false</authenticateSponsorsUsingPortalList>
         <credentialNotificationUsingEmail>false</credentialNotificationUsingEmail>
         <credentialNotificationUsingSms>false</credentialNotificationUsingSms>
         <enableGuestEmailBlacklist>false</enableGuestEmailBlacklist>
         <enableGuestEmailWhitelist>false</enableGuestEmailWhitelist>
         <fieldCompany>
            <include>true</include>
            <require>false</require>
         </fieldCompany>
         <fieldEmailAddr>
            <include>true</include>
            <require>false</require>
         </fieldEmailAddr>
         <fieldFirstName>
            <include>true</include>
            <require>false</require>
         </fieldFirstName>
         <fieldLastName>
            <include>true</include>
            <require>false</require>
         </fieldLastName>
         <fieldLocation>
            <include>false</include>
            <require>false</require>
         </fieldLocation>
         <fieldPhoneNo>
            <include>true</include>
            <require>false</require>
         </fieldPhoneNo>
         <fieldReasonForVisit>
            <include>true</include>
            <require>false</require>
         </fieldReasonForVisit>
         <fieldSmsProvider>
            <include>true</include>
            <require>false</require>
         </fieldSmsProvider>
         <fieldUserName>
            <include>true</include>
            <require>false</require>
         </fieldUserName>
         <guestEmailBlacklistDomains>cisco.pl</guestEmailBlacklistDomains>
         <guestEmailWhitelistDomains>google.com</guestEmailWhitelistDomains>
         <includeAup>false</includeAup>
         <postRegistrationRedirect>selfRegistrationSuccess</postRegistrationRedirect>
         <registrationCode>5678</registrationCode>
         <requireAupAcceptance>false</requireAupAcceptance>
         <requireGuestApproval>false</requireGuestApproval>
         <requireRegistrationCode>true</requireRegistrationCode>
         <selectableLocations>San Jose</selectableLocations>
         <selectableLocations>Brussels</selectableLocations>
         <selectableSmsProviders>Global Default</selectableSmsProviders>
         <sendApprovalRequestTo>selectedEmailAddresses</sendApprovalRequestTo>
      </selfRegPageSettings>
   </settings>
</ns0:selfregportal>

[Jason Kunst]

Didn’t you see this?

https://community.cisco.com/t5/security-documents/ise-api-guest-portal-settings-and-elements/ta-p/3639739