ISE guest API Question enabled field

[amakarenkov]

Greetings!

When I create user using ERS API using:

<?xml version="1.0" encoding="UTF-8"?>

<ns0:guestuser xmlns:ns0="identity.ers.ise.cisco.com" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:ns1="ers.ise.cisco.com" xmlns:ers="ers.ise.cisco.com" description="What the heck is this" id="useless fields" name="why do even I type here">

              <customFields>

              </customFields>

              <guestAccessInfo>

bla bla

              </guestAccessInfo>

              <guestInfo>

                             <enabled>true</enabled>

bla bla

              </guestInfo>

bla bla

</ns0:guestuser>

I recieve the user with the(I checked with Get-By-Id):

<guestInfo>

                             <enabled>false</enabled>

</guestInfo>

The question is why?

I find it frustrating to enable the user with update query.

Thanks.

P.S. Also I dont get it why do I neet to put validDays even if I use fromDate with toDate fields.

halp!

[amakarenkov]

Hi, George!

2.2.0.470 ova eval

[Jason Kunst · Accepted solution]

I spoke to developer about the Enabled.

He said this is only used in Get Operation to check if an account is active "true", an account is active after the user logs in or if under the guest type the bypass guest portal option is selected

The value will be false if account is denied (sponsor approval), expired or suspended

There is no way to set the state of this flag. and opened defect CSCvf36827 to have it hidden.

[amakarenkov]

Dear Jason,

thank you very much for your answer. Just to be clear can you clarify:

1. Is that possible to create a Guest user that will be enabled by default (using POST query)?

2. If YES. Is that correct, that this user will be enabled from the date I specify in fromDate field?

3. If YES. Considering those 2 facts will it be correct to say, that even if I create the guest user and with get operation I will get <enabled>false</enabled> despite this in fact guest is enabled and account is usable without any additional changes?

Also can you please tell what is correct math behind validDays  with fromDate and toDate fields?

1. What is corect validDays value if I will put fromDate 06.16.2017 00:00 and toDate 06.16.2017 23:59

2. What is corect validDays value if I will put fromDate 06.16.2017 00:00 and toDate 06.17.2017 00:00

3. What is corect validDays value if I will put fromDate 06.16.2017 00:00 and toDate 06.18.2017 00:00

Thank you for any response!

Best regards,

Anton Makarenkov

[Jason Kunst]

can you please separate your questions, lets work on this here and move the other one to new post

1. Is that possible to create a Guest user that will be enabled by default (using POST query)?

JAK - you will need to make the guest type you're using have the setting enabled for bypass portal

2. If YES. Is that correct, that this user will be enabled from the date I specify in fromDate field?

YES

3. If YES. Considering those 2 facts will it be correct to say, that even if I create the guest user and with get operation I will get <enabled>false</enabled> despite this in fact guest is enabled and account is usable without any additional changes?

JAK - refer to #1

[simolor78]

Hi all.

In ISE vers 2.2 when you create a GUEST USER by using POST the user is already ENABLED by default. I'am wondering if it's possible to create Guest users disabled and eventually enable them later.

Thank you

[simolor78]

Hi all.

In ISE vers 2.2 when you create a GUEST USER by using POST the user is already ENABLED by default. I'am wondering if it's possible to create Guest users disabled and eventually enable them later.

Thank you

[Jason Kunst · Accepted solution]

No just like the sponsor portal you have to create an account that’s enabled right away (from first login) or do a start time.

How about deactivating (expiring or locking them) then reinstating? Remember the guest purge can’t run when then are deactivating