ClearPass Sponsored Guest - Set Only One Sponsor Email

[jfisher79]

We are currently setting up a guest network using ClearPass and utilizing the sponsored guest feature through the self registration page. I want guests to have to manually type one particular email address in as the sponsor and only that email address be able to be the sponsor. I want them to get an invalid sponsor error when they type any other address. Is there a way to set one custom email that is the only account that can sponsor and for them to have to manually type it in, not hidden or pre-populated? Thank you for any assistance.

[cappalli]

Edit the sponsor_email field and add a validator like below:

array (
  'allow' =>
  array (
    'myemail@domain.xyzz',
 ),
  'deny' =>
  array (
  ),
)

[jfisher79]

Thanks, going to try that right now. So the email address that I want to be the single authorized sponsor needs to be the email address in the validator?

[jfisher79]

It still allows me to enter other email addresses besides the one I really want it to be and sends them an email to authorize. When the guest enters any other email but the one I want it to be I want them to receive an invalid sponsor message. Thanks.

[jfisher79]

Now it's not sending me an email and the login button is active without approval. I was getting the emails yesterday. Any thoughts?

[cappalli]

Did you replace 

myemail@domain.xyzz

with the email address you want to allow? 

[jfisher79]

I did. Should I leave or remote the quotations? Problem now is it's still allowing me to enter other addresses and now I'm not getting an email at all when I was yesterday. Test email via CPPM is working. Thanks.

[jfisher79]

Ok, I'm getting emails now, but still able to use other email accounts as sponsor.

[jfisher79]

Any further thoughts on this? Thanks for your help.

[jfisher79]

Just a quick update to this issue. After spending some time on the phone with Aruba we are going the route of using LDAP to try to accomplish this. Have another call with them today in hopes to use a LDAP filter to perform this. If anyone has any tips that would be appreciated. Thanks.