Security

 View Only
  • 1.  Guest sponsor email

    Posted Feb 15, 2023 05:26 AM

    Hi experts,

    Is it possible to automatically use guest operators email as sponsor email in create_user form? I have a request from customer to automatically send receipts of all created guest accounts to guest operators email. Guest operator using his AD credentials to logging to CPPM Guest.

    I now I can do the sponsor lookup for fetching an email, but can I do that lookup automatically by using operators login credentials?

    Thanks

    Vaclav



  • 2.  RE: Guest sponsor email

    Posted Feb 21, 2023 06:16 AM

    Hi, nobody meets with this scenario yet? Maybe it is not possible to do it.

    Thanks

    V.




  • 3.  RE: Guest sponsor email
    Best Answer

    Posted Feb 22, 2023 10:27 AM

    I think this will be possible but it's a little bit complicated.

    If I understand correctly an user logs in at ClearPass Guest and create a Guest Account. 

    By default test Guest Operator username will be save in the created guest account as sponsor_name.

    There is a way to add the sponsor email to the created account. 

    See below a screenshot of my test environment

    To achieve this there are multiple steps.

    1. Return the Guest Operator email to Guest during login. This is done by updating the enforcement profile for the Guest Operator login.
    • First in CPPM. Go to Administration > Dictionaries > Applications. Export the SSO Application as XML, at a new line to the XML (for example 
      <ApplDictionaryAttributes attrType="String" attrName="E-mail"/>) and upload the file. The result looks as follows:

    • Now update the enforcement profile. I am using AzureAD for authentication but off course you can also fetch the email address from an AD. The email address is returned as SSO:E-mail to guest.

      Result during authentication:

    This is the first step. Now the guest module knows the operator email address.

    2: Use the email address in the create_user form.

    • In ClearPass Guest. Go to Configuration > Pages > Forms. Select create_user and click "Edit Fields"
    • Enable the sponsor_email field
    • Edit the sponsor_email field
    • In the edit page of the sponsor_email field go to the field Initial Value
    • In the Initial Value field enter the following data

      array (  'generator' => 'GeneratorFromSession',  'generator_args' =>   array (    0 => 'userauth_user',    1 => 'SSO:E-mail',  ),)

      Make sure that SSO:E-mail match the attribute added in step 1
    • By default this field is editable by the user. If you want to disable this change the User Interface to Static Text

     



    ------------------------------
    William Bargeman
    Systems Engineer Aruba
    ------------------------------



  • 4.  RE: Guest sponsor email

    Posted Feb 23, 2023 03:20 AM

    Great, thank you very much. And after that I can use the auto_send_smtp  field to send a message to sponsors email, right?

    V.




  • 5.  RE: Guest sponsor email

    Posted Feb 23, 2023 04:14 AM

    Yes, I was not sure but looks working



    ------------------------------
    William Bargeman
    Systems Engineer Aruba
    ------------------------------



  • 6.  RE: Guest sponsor email

    Posted Feb 27, 2023 08:13 AM

    Hi, I was successful to fetch email from AD, thank you very much for your help. But I can't use this email address with auto_send_smtp field. I don't know how to force this auto_send_smtp field to use sponsor_email field as email address.

    Can you help me please with this last thing?

    Thanks


    Vaclav




  • 7.  RE: Guest sponsor email

    Posted Feb 27, 2023 02:40 PM

    I was able to get this working.

    First, the I had set the sponsor email field as static text. For some reason this result in issues. When the type is set static text the sponsor email is saved as sponsor_name instead of sponsor_email. I changed the field type to hidden (text does also work) and now the email is saved in the right field.

    To send the email. 

    • Go to Configuration > Receipts > Email Receipt
    • In the field Copies To enter the text _admin
    • Make sure the send copies field is set correctly based on your preferences.


    ------------------------------
    Willem Bargeman
    ------------------------------



  • 8.  RE: Guest sponsor email

    Posted Feb 28, 2023 09:13 AM

    Hi Willem,

    Thanks a lot. It is working well with "Create Account" option. But for some reason it is not possible to send email receipt with "Create Multiple Guest Accounts" even if I create only 1 account. I use the same fields but CPPM doesnt send any email when I create random account.

    Email Receipt settings:

    Create Guest Account:

    This is working. Email is send to fetched-email@domain.com after I create the account.

    Create Multiple Accounts:

    This is not working.

    Thanks

    Vaclav