A sponsor user is a person who creates the guest user account and is often an employee of the organization; for example, a lobby ambassador who creates and manages guest user accounts through a sponsor-oriented web portal. The Cisco ISE authenticates sponsors through a local database or external Lightweight Directory Access Protocol (LDAP) or Microsoft Active Directory identity stores.
A sponsor portal allows a sponsor to create temporary accounts for guests, visitors, contractors, consultants, or customers to perform HTTPS login to gain access to the network. The network could be a corporate network or access could provide access to the Internet.
You can provide account details to the guest by printout, email, or SMS. The entire experience, from user account creation to guest network access, is stored for auditing and reporting. These topics are discussed here:
Connecting to the Sponsor Portal
You can open a web browser and get connected to the sponsor portal through the web interface over HTTPS. To connect to the sponsor portal, enter the address as provided by your network administrator.
Step 1 Enter the sponsor portal URL in the web browser, for example, https:// ip address:port number /sponsorportal. The port number is configurable in the Cisco ISE Admin portal.
Note The default port for the Sponsor Portal is 8443.
Step 2 Enter your user name and password in the sponsor portal login page (Figure 1-1), and click Login. Use the login credentials that are specified by your network administrator.
Step 3 When you first log in, the Getting Started page is displayed as shown in Figure 1-2.
Note If your network administrator has not configured Sponsor portal on the Cisco ISE server, and you connect to the sponsor portal using the default HTTPS port, you will be redirected to the Cisco ISE Admin portal. If you connect to the sponsor portal using any other port, it will result in a resource not found error message.
Figure 1-1 Sponsor Portal Login Page
Figure 1-2 Getting Started Page
Sponsor User Lockout Following Failed Login Attempts
If you enter an incorrect password for your specified sponsor user ID for three times, the Cisco ISE Sponsor portal user interface “locks you out” of the system. Access to the Cisco ISE Sponsor portal is denied for 30 seconds, and you can make additional attempts after that.
Guest sponsor groups contain the permissions and settings for the sponsor user. Sponsor users that belong to a particular sponsor group have a certain set of permissions and settings when they are logged into the sponsor portal.
Sponsor groups have role-based permissions for sponsors to allow or restrict access to different functions in the sponsor portal. Based on the permissions that are set for the sponsor group, a sponsor may be allowed or restricted to perform these actions:
- Create guest accounts
- Modify guest accounts
- Suspend or reinstate guest accounts
- View guest details
- Send account details to guests by email or SMS
Sponsor groups are configured by your network administrator in the Cisco ISE Admin portal.
Internationalization and Localization
Cisco ISE internationalization adapts the user interface for supported languages. Localization of the user interface incorporates locale-specific components and translated text. In Cisco ISE, Release 1.1 internalization (UTF-8) and localization support includes text in the user interface, such as labels, messages, and user input in text fields.
Cisco ISE, Release 1.1 provides localization and internalization support for the following languages:
- Chinese (traditional), Chinese (simplified)
Internationalization and localization applies to all supported internet browsers.
Note Different browsers might use different locale IDs. An ISE administrator can duplicate language templates on the Admin portal to address browser locale differences.
The Guest portal can be localized to present user interface elements in all supported language locales. This includes text, field names, button labels, and messages. You can configure supported language templates on the administrative portal.
Default templates for supported languages are included in a standard Cisco ISE installation. If an unsupported locale is requested by client browser, the English locale default portal is displayed.
The following Guest portal input fields support UTF-8:
- Login user name
- Login password
- All fields on the self-registration page
Customizing the Sponsor Portal
You can customize default settings of the sponsor portal such as the language template, time zone, telephone country code, and default login page from the Settings Customization page.
To customize default settings of the sponsor portal, complete the following steps:
Sponsor > Settings Customization .
Step 2 Do one of the following to specify the language for the application interface guest printout, email, and SMS notification:
- Check the Use Browser Locale check box, to display the default language of the user’s browser.
- Uncheck the Use Browser Locale check box, and from the Language Template drop-down list choose a language.
There are ten standard language templates, as shown in Figure 1-3. If your administrator created additional custom templates, they appear in this list as well. For a list of the standard languages, see Supported Languages.
Figure 1-3 Standard Language Templates
Step 3 Choose a Timezone from the drop-down list. The timezone you choose applies to the account creation pages.
Step 4 Specify a Location as the default guest location for creating accounts.
Step 5 Enter the Sponsor’s Email Address to receive a copy of the guest account details.
The Cisco ISE administrator must have configured an email server for the email configuration options to work properly. Contact your administrator if this feature is not available to you.
Step 6 Check the Receive Email Confirmation check box to receive a copy of the guest account details whenever you click the Email button to notify the users of their guest account details.
To notify guest users through email, your Cisco ISE administrator must set appropriate authorization levels while creating sponsor groups. Contact your administrator if this feature is not available to you.
Note If you do not have privileges for viewing guest passwords, the Receive Email Confirmation option will not work. Likewise, if you printout guest details the password field displays as **** instead of the actual password.
Step 7 Choose the Default Page to Show After Login from the drop-down list.
Step 8 Click Save .
Your customizations are applied. For example, if you chose Spanish as a language template the portal pages appear in the selected language. Figure 1-4 shows the Create a Single Account page after applying the Spanish language template.
Figure 1-4 Applied Spanish Language Template