Security

Hi All,

We are utilizing sponsored guest access on clearpass and we setup the BCC feature to send a copy of all sponsored guest requests to a specific email in order to keep track of how many people request access. Now the sponsor OR that other email can accept the guest. Is there somewhere to see who actually enabled the account? This is to prevent the sponser from saying it was the other account that enabled access for any guest. Is there a way to configure this in the service?

Thanks!

The sponsor of a guest is marked in the sponsor field that the guest enters on the form.  However, if the user from the BCC address approves the guest, then this is not automatically updated.  Thinking quickly, the only way I can see this happening is to get the time/date stamp that the visitor account was enabled (should be in the records) and then look at access tracker just before that time.  Who has logged into ClearPass?  That should lead to your answer.

Ok understood. The problem is we opted to have the sponsor not need to log into clearpass before approving the guest because they want all employees to be able to be sponsers and we don't want them to have access to ClearPass. I guess it's not an option without forcing the sponsor to log in then? 

Thanks for your help!

If you don't make them login, then ClearPass won't know who approved the request...just that it was approved.

Ok, thanks for the help.