ISE - Sponsor Approved Guest Access

[User42]

Hi everyone

In all Tutorials, there is the following procedure for Sponsor Approved Guest Access:

The Guest register himself -> Sponsor get Notified and approve -> User get his credentials

Is there a way to change that?
The Guest register himself -> User get Credential (account is inactive) -> Sponsor get Notified and approve -> account gets enabled

Thanks in advance!

[Arne Bier · Accepted solution]

I don't believe there is such an option. Cisco has taken the approach that is more logical and efficient.

[icarimo]

Hello, 
I would like to validate if the following setup is possible.
- To have a Guest SSID with Cisco ISE guest portal Self Registered with Sponsor approval without the need to guest insert credentials.
I would like to have the following flow:

1. Guest is redirected to guest portal and register itself
2. Sponsor user receives an email to approve guest request
3. Guest is automatically register without the need to insert credentials

I know if the guest is in "waiting menu" and sponsor approves the guest is automatically authorized.
But if for some reason the guest leave this page or the sponsor approves only after 30min, the automatic approves does not work. 

Another scenario, that I would like to validate is, how can I ensure that Guest user do not require to insert the credentials in the next days? in WLC I can only configured the session timeout for maximum of 1 day. I saw some documentation regarding the feature "remember me" that basically checks the MAC address inside the Guest endpoints group.

Is there another way to ensure that guest user will never need to insert the credentials after the sponsor approval during 7 days?