Security

Reply
Contributor I
Posts: 20
Registered: ‎05-14-2014

Guest account role selection doesn't show up without sponsor authentication

Hello!

 

We have already made guest registration with sponsor confirmation. It works fine.

 

We would like sponsor to choose guest account role. So in Guest Self-Registartion > Receipt Page > Actions we have specified Role Override --> Prompt. This works fine (sponsor gets email, clicks on a link in the email and sees a web form where guest role can be changed) until we switch off sponsor authentication (Require sponsors to provide credentials prior to sponsoring the guest --> unchecked). After sponsor authentication is disabled the confirmation web form has no field to change guest role.

 

Can anyone say if it is expected behaviour?

 

Thanks in advance!

 

/ Ruske

Contributor I
Posts: 20
Registered: ‎05-14-2014

Re: Guest account role selection doesn't show up without sponsor authentication

Is anyone using guest roles that are set by sponsor? Can you confirm my experience?

 

/ Ruske

Aruba
Posts: 1,520
Registered: ‎06-12-2012

Re: Guest account role selection doesn't show up without sponsor authentication

Yes that is what you should see. You can override the role in the guest account manager, but it is based on your Operator account access.
Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Contributor I
Posts: 20
Registered: ‎05-14-2014

Re: Guest account role selection doesn't show up without sponsor authentication

Troy,

 

thanks for your answer. Can you be more specific how to override a role in guest account manager?

 

The main questions are:

 

1) Shold I edit a role here: Administration --> Operator Logins --> Profiles?

2) Which role is responsible for unauthenticated sposor access?

 

Thanks a lot!

 

/ Ruske

Aruba
Posts: 1,520
Registered: ‎06-12-2012

Re: Guest account role selection doesn't show up without sponsor authentication


Ruske wrote:

Troy,

 

thanks for your answer. Can you be more specific how to override a role in guest account manager?

 

The main questions are:

 

1) Shold I edit a role here: Administration --> Operator Logins --> Profiles?

2) Which role is responsible for unauthenticated sposor access?

 

Thanks a lot!

 

/ Ruske

Are you asking about changing the default role that all users get or a role after they have setup an account?

 

For question to change the role for a single guest user in

 

Screen Shot 2014-07-31 at 12.58.32 AM.png

 

If you want to change the role of multiple guest users you can do it in the following area. 

 

Screen Shot 2014-07-31 at 1.00.06 AM.png

 

I dont quite understand your second question. 

 

 

Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Contributor I
Posts: 20
Registered: ‎05-14-2014

Re: Guest account role selection doesn't show up without sponsor authentication

[ Edited ]

 

I have two role for guests. Sponsor assigns role to the guest account.

 

sponsor_email.png

 

We don't want the sponsor to authenticate in ClearPass (unauthenticated sposor) to allow guest access and assign account role.

 

If we remove sposor authentication (Require sponsors to provide credentials... --> unchecked) we don't see Account Role field anymore.

 

sponsor_email2.png

 

 

Did it become clearer what we are trying to do?

 

/ Ruske

Contributor I
Posts: 20
Registered: ‎05-14-2014

Re: Guest account role selection doesn't show up without sponsor authentication

Can anyone give insight into how this could work?

 

Thanks!

 

/ Ruske

Aruba
Posts: 1,520
Registered: ‎06-12-2012

Re: Guest account role selection doesn't show up without sponsor authentication

I just did a test on the latest release and there are no issues. The roles show up on both authenticate and un authenticated.

Please open a TAC case.
Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Contributor I
Posts: 20
Registered: ‎05-14-2014

Re: Guest account role selection doesn't show up without sponsor authentication

Troy, thanks for the information!

 

We are using ClearPass  6.3.4.64924 by the way. As far as you don't have the problem we will open TAC case.

 

Thanks again!

 

/ Ruske

Search Airheads
Showing results for 
Search instead for 
Did you mean: