Security

Reply
MVP
Posts: 385
Registered: ‎05-09-2013

ClearPass Guest - Extend Expiration

Hi All,

 

Can you have options to extend an accounts expiration in the sponsor's confirmation email? I found this, but I'm not sure if this is what I need:

 

Configuration -> Guest Self-Registration -> Edit -> Receipt page -> Actions

  • Extend Expiration option?

 

An example use case would be a Guest comes and my client knows they will need longer access than the default, is it possible to extend access from the sponsor's confirmation email as opposed to logging into ClearPass and doing it from there?

 

Thanks!


Michael Haring | Senior Network Engineer
Comm Solutions, an Optiv Security Company
www.commsolutions.com | www.optiv.com
Aruba
Posts: 1,548
Registered: ‎06-12-2012

Re: ClearPass Guest - Extend Expiration

I'm running the 6.3 beta here so I would need someone to make sure you they have the same settings but you can add settings in the field below.

 

1. Click on the self-reg page you want to modify

2. Click advance edit

3. Scroll to the sponsor section add the fields you want. 

 

For example

 

+12h | Add 12 hours
+24h | Add 24 hours
+7d | Add 7 Days

 

screenshot_01 Jan. 08 01.00.gif

Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
MVP
Posts: 777
Registered: ‎03-25-2009

Re: ClearPass Guest - Extend Expiration

FYI, I ran into an 'issue' where using that "extend expiration" option disabled my sponsor verification.

 

 

My issue:

"Running into an issue were we have sponsor verification enabled but the guest account is created as enabled without sponsor ok."

 

 TAC response:
- verified the self registration page configuration and found that user accounts are not disabled before the sponsor's approval.
- When we remove the values in extend expiration in actions page, account is disabled and works properly.

- have verified with our hq engineer and received an update that it is a normal behaviour if we use the extend expiration feature.

- It would be overriding the sponsorship approval and provides the login option to the users.

Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Contributor I
Posts: 31
Registered: ‎12-12-2012

Re: ClearPass Guest - Extend Expiration

Yes, I had exactly the same response from TAC.

We ended up allowing the Guest Users to select their own expiration time from a drop down menu on the registration page. The sponsor can then allow or deny the request, but cannot manipulate the expiration time as part of the approval workflow.

 

Chris

 

Aruba Employee
Posts: 102
Registered: ‎03-15-2011

Re: ClearPass Guest - Extend Expiration

There is an easy fix to your situation.  The feature is exactly has it is described as Extending Expiration.  That means the default expiration is what is set in the form.  These are for situations when you want to give them limited access and then optionally add more.  If you set a Role Override the account will also default enabled.

 

To fix, simply add the 'enabled' field to your self-registration form, set its type to Hidden, set its Initial Value to 0, and optionally under the Advanced section click the Force Value.  If 'enabled' exists we do not apply the auto logic.

 

 

Search Airheads
Showing results for 
Search instead for 
Did you mean: