cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

2521
Views
3
Helpful
6
Replies
rmavila
Cisco Employee

ISE API call to create guest user account

Hi Team,

One of my enterprise customer has a Visitor Management System (VMS) which he wants to be integrated with ISE to provide user accounts and provide internet access to guests. The visitor enters his name and other details on the VMS and VMS will talk to ISE through APIs. ISE should create the account and then send out an SMS with the guest account details to the guest user.

When i look at the API documentation page on ISE for creating guest user, i see that the password field is set to mandatory required. Does that mean the password should be generated by the VMS tool and then sent to ISE ?  Screen Shot 2018-03-19 at 9.03.36 AM.png

Since this API flow is simulating the sponsor portal, shouldn't ISE be generating the user account and password, rather than password field being required and it needs to be sent by VMS ?


Customer also wanted to know if we support bulk creation of guest accounts via a single API calls ? I.e a bunch of user details are input into the VMS and this bulk guest accounts created  via a single API call.

jijose


Appreciate your help.


Regards

Rahul

1 ACCEPTED SOLUTION

Accepted Solutions

There is a documentation error on password requirement. Please work with tac on documentation bug.

Here is a call to do a bulk submit.

https://10.197.65.243:9060/ers/config/guestuser/bulk/submit

Also see this for more tips

https://communities.cisco.com/docs/DOC-71891

View solution in original post

6 REPLIES 6
Jason Kunst
Cisco Employee

You can set the password or have the system generate one

I am pretty sure we don’t support bulk creation but can double check

Thanks Jason for looking into this.

Customer wants ISE to generate the user credentials. However the API documentation states that password is a required field in the input message to ISE. So my understanding is that VMS has to provide password when it sends the information to ISE. Is this a documentation error or am i understanding it incorrectly.

The VMS system will send across the info to ISE in json format. Would you by any chance have any sample json script which is sent to ISE to create a system generated guest user account ?

Thank you.

Regards

Rahul

There is a documentation error on password requirement. Please work with tac on documentation bug.

Here is a call to do a bulk submit.

https://10.197.65.243:9060/ers/config/guestuser/bulk/submit

Also see this for more tips

https://communities.cisco.com/docs/DOC-71891

View solution in original post

Hi Jason,

Is the bulk submit to create guest users supported in JSON format ? The link that you sent - ISE Guest Sponsor API Tips & Tricks  mentions that Bulk calls can only be done with XML and not JSON.

Once again, thank you for the help.

Regards

Rahul

Sorry I will update that, developer confirmed it supports both XML and JSON

This is a sample .JSON with 2.2, ISE setting the username/password automatically

{

"GuestUser": {

"guestType": "Contractor (default)",

"portalId": "6b93b3f0-26dd-11e8-a836-005056872c7f",

"guestAccessInfo": {

"validDays": 91,

"fromDate": "03/19/2018 17:47",

"toDate": "06/17/2018 17:47",

"location": "San Jose"

},

"customFields": {}

}

}

Content for Community-Ad