03-01-2018 07:24 AM
Hello,
we are running guest service with ISE 2.3p2.
We have created through ISE API a set of users which is accessible/managed through sponsor portal.
Customer has requested to delete guest accounts after x days of inactivity.
I have found the option under: Work Centers > Guest Access >Settings > Guest Account Purge Policy
But the menu and the doc is not very clear to me ...
Thanks in advance for your help.
Cengiz
Solved! Go to Solution.
03-01-2018 07:39 AM
We only purge accounts that have expired, there is now way to mark for inactivity using native ISE options . After the 90 days any accounts expired will be removed
If this is critical piece then either create shorter guest accounts or write your own tool using api that can query list of active guest accounts and compared to when they last used it and handle cleaning that way
The ldap/ad piece are for those accounts that live in external systems, the system will purge the shadow account used for those type users
03-01-2018 07:39 AM
We only purge accounts that have expired, there is now way to mark for inactivity using native ISE options . After the 90 days any accounts expired will be removed
If this is critical piece then either create shorter guest accounts or write your own tool using api that can query list of active guest accounts and compared to when they last used it and handle cleaning that way
The ldap/ad piece are for those accounts that live in external systems, the system will purge the shadow account used for those type users
03-01-2018 07:50 AM
Thanks Jason this is useful.
Is there anything planned in future releases?
03-01-2018 03:25 PM
There is no current plan to enhance this, please reach out to our ise product managers through sales channel
03-01-2018 07:42 AM
08-21-2018 05:14 PM
It's my understanding that expired only guest accounts that expired can be purged which means accounts created by a sponsor or by self registration. What about open hotspot guest users which do not have a guest account, but the MAC address of the device is placed in some sort of whitelist by ISE?
08-21-2018 06:29 PM - edited 08-21-2018 06:30 PM
You can use endpoint purge policy for that. Unless modified from default, hotspot endpoints get added to GuestEndpoint group which you can create purge policy for:
08-21-2018 06:30 PM
Okay there are several things here:
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide