Cisco ISE API & Guest accounts

[MasterOfDis]

Dear,

We are trying to automate the creation of Guest account with the use of the Cisco ISE API:

We are using Cisco ISE 2.6.0.156 and I followed the following guide:

https://community.cisco.com/t5/security-documents/ise-guest-sponsor-api-tips-amp-tricks/ta-p/3636773#toc-hId-1767282147

This guide lets you create two users, one sponsor-api and one Admin users.

At step How can I validate that a sponsor is valid?, when I visit the URL https://<ISE-ADMIN-NODE>:9060/ers/config/guestuser/versioninfo i am getting a popup where I need to authenticate with the sponsor-api, I am getting a 401 error.

See a screenshot below:

Is this correct and how can I made a guestaccount by using the API?

[Francesco Molino]

Hi

Are you using a sponsor account with ERS rights when trying to create guest account? The admin account won't work, it has to be a sponsor account.