Security

 View Only
last person joined: 7 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

ClearPass Self Registration set user role

This thread has been viewed 12 times
  • 1.  ClearPass Self Registration set user role

    Posted 2 hours ago

    Hi,

    I want to achieve that users can choose user role while creating account.

    I have expanded role mapping for [Guest Roles] and enabled role_id field for selfregistration page.

    But for any other role than [Guest] I get error "Please choose from one of the available roles".

    How can I fix that?

    Best regards

    Dennis



  • 2.  RE: ClearPass Self Registration set user role

    Posted 2 hours ago

    Hi Dennis

    I hav never tried to configure a way for the guests to select different roles during the registration, so I don't know if it's possible to do. Maybe the role_id is filtered as the guest isn't an authenticated user

    Maybe you need to create a custom attribute instead and set a value on this attribute on the guest account.

    In the login step you can evaluate this attribute in the role mapping policy.



    ------------------------------
    Best Regards
    Jonas Hammarbäck
    MVP Guru 2024, ACEX, ACDX #1600, ACCX #1335, ACX-Network Security, Aruba SME, ACMP, ACSA
    Aranya AB
    If you find my answer useful, consider giving kudos and/or mark as solution
    ------------------------------



  • 3.  RE: ClearPass Self Registration set user role

    Posted an hour ago

    Hi Jonas,

    thank you for your answer.

    I found a workaround by enabling option "

    That's fine for my purpose. But would be nice to know if it's possible without that option.

    Your hint with custom field would also be an alternative - I haven't thought about that. :)

    Best regards

    Dennis




  • 4.  RE: ClearPass Self Registration set user role

    Posted 41 minutes ago

    I have tested it with custom field and that's also working just fine.