Hello,
i deployed a cisco ise 3.1.0.518 Patch 8 and setup the sponsor portal to allow the creation of guest users.
I have 3 sponsor groups:
- Guest_Sponsor_3days ---> can create account of 3 days duration
- Guest_Sponsor_7days ---> can create account of 7 days duration
- Guest_Sponsor_90days ---> can create account of 90 days duration
These 3 groups are referenced in AD in order that only a user in AD can create a guest account with the settings he hinerits based on his sponsor group.
The issue is that either a user belonging to 3 days or 7 days when creating the guest user can select the 90 days group profile although the 3 or 7 days sponsor group configurations is correct.
So the 3days sponsor user can see 3days and 90days option, the 7 days sponsor user can see 7days and 90days option.
the 3days and 7days are not able to see each other (that's why i'm thinking the configuration is correct).
Furthermore, all other users not included in the 3 AD groups are able to create the guest user with the 90days sponsor settings.
I think there may be a default option but if it is, i can't find it, or it may be a possibile bug?
In attachment the configuration of the 3days group.
Any advise is really appreciated.
Thank you
