Security

last person joined: 14 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Guest account role selection doesn't show up without sponsor authentication

This thread has been viewed 0 times

  • 1.  Guest account role selection doesn't show up without sponsor authentication

    Posted Jul 29, 2014 05:44 AM

    Hello!

     

    We have already made guest registration with sponsor confirmation. It works fine.

     

    We would like sponsor to choose guest account role. So in Guest Self-Registartion > Receipt Page > Actions we have specified Role Override --> Prompt. This works fine (sponsor gets email, clicks on a link in the email and sees a web form where guest role can be changed) until we switch off sponsor authentication (Require sponsors to provide credentials prior to sponsoring the guest --> unchecked). After sponsor authentication is disabled the confirmation web form has no field to change guest role.

     

    Can anyone say if it is expected behaviour?

     

    Thanks in advance!

     

    / Ruske



  • 2.  RE: Guest account role selection doesn't show up without sponsor authentication

    Posted Jul 29, 2014 08:49 AM

    Is anyone using guest roles that are set by sponsor? Can you confirm my experience?

     

    / Ruske



  • 3.  RE: Guest account role selection doesn't show up without sponsor authentication

    EMPLOYEE
    Posted Jul 29, 2014 03:00 PM
    Yes that is what you should see. You can override the role in the guest account manager, but it is based on your Operator account access.


  • 4.  RE: Guest account role selection doesn't show up without sponsor authentication

    Posted Jul 30, 2014 09:47 AM

    Troy,

     

    thanks for your answer. Can you be more specific how to override a role in guest account manager?

     

    The main questions are:

     

    1) Shold I edit a role here: Administration --> Operator Logins --> Profiles?

    2) Which role is responsible for unauthenticated sposor access?

     

    Thanks a lot!

     

    / Ruske



  • 5.  RE: Guest account role selection doesn't show up without sponsor authentication

    EMPLOYEE
    Posted Jul 31, 2014 02:03 AM
    @Ruske wrote:

    Troy,

     

    thanks for your answer. Can you be more specific how to override a role in guest account manager?

     

    The main questions are:

     

    1) Shold I edit a role here: Administration --> Operator Logins --> Profiles?

    2) Which role is responsible for unauthenticated sposor access?

     

    Thanks a lot!

     

    / Ruske

    Are you asking about changing the default role that all users get or a role after they have setup an account?

     

    For question to change the role for a single guest user in

     

    Screen Shot 2014-07-31 at 12.58.32 AM.png

     

    If you want to change the role of multiple guest users you can do it in the following area. 

     

    Screen Shot 2014-07-31 at 1.00.06 AM.png

     

    I dont quite understand your second question. 

     

     



  • 6.  RE: Guest account role selection doesn't show up without sponsor authentication

    Posted Jul 31, 2014 06:53 AM

     

    I have two role for guests. Sponsor assigns role to the guest account.

     

    sponsor_email.png

     

    We don't want the sponsor to authenticate in ClearPass (unauthenticated sposor) to allow guest access and assign account role.

     

    If we remove sposor authentication (Require sponsors to provide credentials... --> unchecked) we don't see Account Role field anymore.

     

    sponsor_email2.png

     

     

    Did it become clearer what we are trying to do?

     

    / Ruske



  • 7.  RE: Guest account role selection doesn't show up without sponsor authentication

    Posted Aug 04, 2014 03:24 AM

    Can anyone give insight into how this could work?

     

    Thanks!

     

    / Ruske



  • 8.  RE: Guest account role selection doesn't show up without sponsor authentication
    Best Answer

    EMPLOYEE
    Posted Aug 04, 2014 03:32 AM
    I just did a test on the latest release and there are no issues. The roles show up on both authenticate and un authenticated.

    Please open a TAC case.


  • 9.  RE: Guest account role selection doesn't show up without sponsor authentication

    Posted Aug 04, 2014 03:49 AM

    Troy, thanks for the information!

     

    We are using ClearPass  6.3.4.64924 by the way. As far as you don't have the problem we will open TAC case.

     

    Thanks again!

     

    / Ruske