ISE Sponsor Groups - dynamic?

[Arne Bier]

Hello

Is there a hard limit on how many Sponsor Groups I can create in ISE?

In general, how would one go about creating a Sponsored Guest setup where there are thousand of individual branch locations, and each location wants to (or should!) maintain only its own Guest accounts, so that when Sponsor Admin users log in they only see the guest accounts local to their physical location?

In a location there may be more than one sponsor, hence, the Group should allow accounts to be created by all members of that Group.  And the Group is authenticated against AD of course.

Perhaps it would be handy to have ISE create dynamic Groups based on a combination of a user's AD Attributes (e.g. DomainX + GroupNameZ ) - then all the co-workers with the same AD Attributes would become members of that same Dynamic Sponsor Group.

Any advice / re-education appreciated

[Craig Hyps · Accepted solution]

This is automatically built into system for a sponsor that is allowed to view only its own accounts.  There is no hard limit on max number of Sponsor Groups but that is not to say that number is unlimited, but simply tat we have not tested a max limit.  If idea was to use Sponsor Groups to control access by location, and expect 1000s of locations, then one option would be to use a shared sponsor account and leverage the option to control based on "OWN ACCOUNTS", rather than thousands of Sponsor Groups where you would base access on "SAME GROUP ACCOUNTS". 

/Craig