This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC!
We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Greetings!
When I create user using ERS API using:
<?xml version="1.0" encoding="UTF-8"?>
<ns0:guestuser xmlns:ns0="identity.ers.ise.cisco.com" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:ns1="ers.ise.cisco.com" xmlns:ers="ers.ise.cisco.com" description="What the heck is this" id="useless fields" name="why do even I type here">
<customFields>
</customFields>
<guestAccessInfo>
bla bla
</guestAccessInfo>
<guestInfo>
<enabled>true</enabled>
bla bla
</guestInfo>
bla bla
</ns0:guestuser>
I recieve the user with the(I checked with Get-By-Id):
<guestInfo>
<enabled>false</enabled>
</guestInfo>
The question is why?
I find it frustrating to enable the user with update query.
Thanks.
P.S. Also I dont get it why do I neet to put validDays even if I use fromDate with toDate fields.
halp!
Solved! Go to Solution.
I spoke to developer about the Enabled.
He said this is only used in Get Operation to check if an account is active "true", an account is active after the user logs in or if under the guest type the bypass guest portal option is selected
The value will be false if account is denied (sponsor approval), expired or suspended
There is no way to set the state of this flag. and opened defect CSCvf36827 to have it hidden.
Hi, George!
2.2.0.470 ova eval
I spoke to developer about the Enabled.
He said this is only used in Get Operation to check if an account is active "true", an account is active after the user logs in or if under the guest type the bypass guest portal option is selected
The value will be false if account is denied (sponsor approval), expired or suspended
There is no way to set the state of this flag. and opened defect CSCvf36827 to have it hidden.
Dear Jason,
thank you very much for your answer. Just to be clear can you clarify:
1. Is that possible to create a Guest user that will be enabled by default (using POST query)?
2. If YES. Is that correct, that this user will be enabled from the date I specify in fromDate field?
3. If YES. Considering those 2 facts will it be correct to say, that even if I create the guest user and with get operation I will get <enabled>false</enabled> despite this in fact guest is enabled and account is usable without any additional changes?
Also can you please tell what is correct math behind validDays with fromDate and toDate fields?
1. What is corect validDays value if I will put fromDate 06.16.2017 00:00 and toDate 06.16.2017 23:59
2. What is corect validDays value if I will put fromDate 06.16.2017 00:00 and toDate 06.17.2017 00:00
3. What is corect validDays value if I will put fromDate 06.16.2017 00:00 and toDate 06.18.2017 00:00
Thank you for any response!
Best regards,
Anton Makarenkov
can you please separate your questions, lets work on this here and move the other one to new post
1. Is that possible to create a Guest user that will be enabled by default (using POST query)?
JAK - you will need to make the guest type you're using have the setting enabled for bypass portal
2. If YES. Is that correct, that this user will be enabled from the date I specify in fromDate field?
YES
3. If YES. Considering those 2 facts will it be correct to say, that even if I create the guest user and with get operation I will get <enabled>false</enabled> despite this in fact guest is enabled and account is usable without any additional changes?
JAK - refer to #1
Hi all.
In ISE vers 2.2 when you create a GUEST USER by using POST the user is already ENABLED by default. I'am wondering if it's possible to create Guest users disabled and eventually enable them later.
Thank you