Sponsored guest approval - the idea

[Piotr Grabowski]

Hi,

I'm new in ISE and I have a question about the idea behind sponsor approved access. As a guest - I'm connecting a guest wireless, and be redirected to a webpage where I can register and give the sponsor email. The sponsor receives an email, clicks link and approves me, but to get login credentials I have to read an email so I need to have email access. Does that mean that there should be mail access allowed in guest ACL?

Regards,

Piotr

[Arne Bier]

ISE 2.7 has a feature to allow unregistered guest a limited time to reach internet. That would allow a sponsored user to get their creds via email. Other options are Creds via SMS.

[Jason Kunst · Accepted solution]

The credentials aren’t created until the sponsor approves them so that won’t help.

Opening up internet for email won’t work as it’s impossible to know where there service lies. Unless it’s restricted to certain email domain

The feature you were looking for is the ability to permit grace access to login after the guest account was approved and the email notification was sent. This was supposed to be in 2.7 but didn’t make it

Please reach out to our product managers at http://cs.co/ise-feedback

[Piotr Grabowski]

Thank you for explanation, one quick question more - is it possible to share a "guest portal" to a person who plans a visit? I mean to apply for a guest account in advance using a webpage for example.

Regards,

Piotr

[Jason Kunst]

Yes you could do that using the ISE APIs

http://cs.co/ise-api

A less secure approach would be to open up a self registration portal to the internet
Check out kiosk (search for that keyword) at http://cs.co/ise-guest

There are also more api tips tricks out there on that page

[epasqualotto]

Old post but can be usefull to someone...

With external captive-portal page like https://mg.backloop.biz guests can request Internet access to sponsor and waits the approval without need to access their mail account. After the approve, session still active based on configuration. No account needed or mail confirm by guests.