Guest two factor authentication

[ymadheka]

Hi Team,

We have a customer who wants to have a dual factor authentication for the guest user through ISE. The process will be as follows:

• ISE will create pre generated access codes which will be printed as scratch cards, these scratch cards will be provided by the person to whom the guest visits.
• The guest will connect to the appropriate Guest SSID, redirected to the authentication portal on which the above code are put by guest.
• Once authenticated the ISE will create a username/password through the self registration or sponsor portal.
• Guest now logins with the provided username and password.

The requirement is to have a two factor authentication for the guest users and above method was suggested by the customer (they saw such mechanism in a hotel).

Kindly suggest for the above or any other alternative.

Thanks & Regards,

Yogesh Madhekar

[Jason Kunst]

Besides using the access code on the self-registration page there is no feature inside the product

There is no API to rotate this code and it's per portal, customer could have multiple portals if need more than one code and redirect depending on ssid WLAN ap group etc

https://supportforums.cisco.com/sites/default/files/ise_location-based_web_portals-v2.pdf

Customer can engage web customization engineer in house or contracted to help design a portal page that can contact a backend mechanism to generate and print codes that's may rotate per their requires