03-18-2018 08:41 PM
Hi Team,
One of my enterprise customer has a Visitor Management System (VMS) which he wants to be integrated with ISE to provide user accounts and provide internet access to guests. The visitor enters his name and other details on the VMS and VMS will talk to ISE through APIs. ISE should create the account and then send out an SMS with the guest account details to the guest user.
When i look at the API documentation page on ISE for creating guest user, i see that the password field is set to mandatory required. Does that mean the password should be generated by the VMS tool and then sent to ISE ?
Since this API flow is simulating the sponsor portal, shouldn't ISE be generating the user account and password, rather than password field being required and it needs to be sent by VMS ?
Customer also wanted to know if we support bulk creation of guest accounts via a single API calls ? I.e a bunch of user details are input into the VMS and this bulk guest accounts created via a single API call.
Appreciate your help.
Regards
Rahul
Solved! Go to Solution.
03-19-2018 08:24 AM
There is a documentation error on password requirement. Please work with tac on documentation bug.
Here is a call to do a bulk submit.
https://10.197.65.243:9060/ers/config/guestuser/bulk/submit
Also see this for more tips
https://communities.cisco.com/docs/DOC-71891
03-19-2018 04:46 AM
You can set the password or have the system generate one
I am pretty sure we don’t support bulk creation but can double check
03-19-2018 06:03 AM
Thanks Jason for looking into this.
Customer wants ISE to generate the user credentials. However the API documentation states that password is a required field in the input message to ISE. So my understanding is that VMS has to provide password when it sends the information to ISE. Is this a documentation error or am i understanding it incorrectly.
The VMS system will send across the info to ISE in json format. Would you by any chance have any sample json script which is sent to ISE to create a system generated guest user account ?
Thank you.
Regards
Rahul
03-19-2018 08:24 AM
There is a documentation error on password requirement. Please work with tac on documentation bug.
Here is a call to do a bulk submit.
https://10.197.65.243:9060/ers/config/guestuser/bulk/submit
Also see this for more tips
https://communities.cisco.com/docs/DOC-71891
03-21-2018 11:48 PM
Hi Jason,
Is the bulk submit to create guest users supported in JSON format ? The link that you sent - ISE Guest Sponsor API Tips & Tricks mentions that Bulk calls can only be done with XML and not JSON.
Once again, thank you for the help.
Regards
Rahul
03-22-2018 05:22 AM
Sorry I will update that, developer confirmed it supports both XML and JSON
03-19-2018 08:37 AM
This is a sample .JSON with 2.2, ISE setting the username/password automatically
{
"GuestUser": {
"guestType": "Contractor (default)",
"portalId": "6b93b3f0-26dd-11e8-a836-005056872c7f",
"guestAccessInfo": {
"validDays": 91,
"fromDate": "03/19/2018 17:47",
"toDate": "06/17/2018 17:47",
"location": "San Jose"
},
"customFields": {}
}
}
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: