ISE self-registration and user/password generating

[n.poongsawad]

Hi Experts,

I'm about to implement ISE for university campus which holding concurrent ~3000 users.

With wireless lic. we designed to broadcast only one ssid through out campus. Using AD database to location student, staff, doctor etc. into thier dedicated vlan.

Is this possible to do as following setup?

Once user (device & user account) come into system for first time, connect to SSID. System redirects to self-registration portal. User need to fill in his/her credential which holding in exisiting AD databased. Along with his Cell phone number & e-mail address. The system regcognizes the MAC of their device.

After that, user get their NEW generated credential through SMS and/or e-mail (just like ISE sponsorship portal). Then user now be able to onboard his/her device through EAP-TLS or PEAP etc.

Aim of forcing user to fill and get their new credential through SMS & e-mail is, we need to gather and track down to their active contact point. Which is university's policy. 

Please let me some suggestion. The solution might be a conbination of Staff dot1x onboarding and Guset self registration. Any opinion is welcome. 

Nipat CCIE#29422

[Venkatesh Attuluri]

credentials created via self registration portal sent via SMS feature is going to be available in 1.3

[n.poongsawad]

Thank Vattullu,

I found that we can provide self register by sponsor portal which SMS and email the new credential to user.

Is that possible to allow user to login (Active Directory) to register themself on one sponsor portal SSID THEN put new credential onboard for another EAP-TLS SSID?

Another question may raise, could we limit number of accout that one sponsor can create their guest?

And when a account was created, where identity source for EAP-TLS SSID to point? Internal identity source?

Nipat CCIE#29422

[Venkatesh Attuluri]

In ISE 1.2 we dont have any option to limit number for guest accounts a sponsor can create

[Saurav Lodh]

This feature is in roadmap