The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
On the Manage Accounts page you can manage the guest accounts you created and any other accounts that you have the authority to manage.
You can edit any guest account, regardless of the state it is in.
Guests may sometimes be unable to log into the network because they have lost or forgotten their passwords. You can help these guests regain access to the network by resending their original passwords.
You cannot resend passwords to guests who have changed them. If these guests have lost or forgotten their new passwords, you must reset them and notify the guests.
You can resend passwords for accounts that are either Created or Active.
You cannot resend passwords for accounts that are either Pending Approval, Suspended, Expired, or Denied.
You can extend the account durations for guests before or after their accounts expire, so that they can access the network for longer than originally permitted. You can also extend the account durations when editing guest accounts.
If guest accounts have expired, they are no longer able to connect to the network. An automated process runs periodically (based on criteria set by your system administrator) that removes (purges) all expired accounts from the system. If that happens before you can extend the account duration for an expired account, you will need to create new accounts for these guests.
When guest accounts are suspended manually by you or expire, the affected guests are disconnected from the network and can no longer access it.
Regardless of their state, active, pending and so on, guest accounts expire when they reach the end of their account duration, which you defined when you created the accounts.
Suspended and expired accounts are automatically purged based on a schedule defined by your system administrator, but the default is every 15 days. After an account is purged, you must create a new account for that guest. However, you can reinstate suspended accounts and extend expired accounts before they are purged.
You can suspend the accounts of guests, which disconnects them from the network and prevents them from accessing it. However, their accounts are retained in the Cisco ISE database.
You can delete any guest account, regardless of the state it is in.
Guests may sometimes be unable to log into the network because they have lost or forgotten their passwords. You can help these guests regain access to the network by resetting their passwords.
You can reinstate guest accounts that you suspended previously or denied approval.
Action | Usage Guidelines | Eligible Account States |
---|---|---|
Edit |
Make changes to a selected account. |
All, except Suspended, Denied. |
Resend |
Email, text, or print account details for the selected guests. |
Active, Created |
Extend |
Adjust the access time period or reactivate the selected expired guest accounts. |
Active, Created, Expired |
Suspend |
Disable the selected guest accounts without deleting them from the system. You may be prompted to provide reasons for suspending an account. |
Active, Created |
Delete |
Remove the selected guest accounts from the Cisco ISE database. |
All |
Reset Password |
Reset the selected guest passwords to random passwords and notify the guests of the account details. |
Active, Created |
Reinstate |
Enable the selected suspended guest accounts and approve previously denied accounts. |
Suspended, Denied |
Refresh |
View any changes to the displayed accounts. |
Not applicable |
Current State | Description | New State |
---|---|---|
Active |
Guests with these accounts have successfully signed in through a credentialed Guest portal, or bypassed the credentialed Guest captive portal. In the latter case, the accounts belong to guest types that are configured to bypass the credentialed Guest captive portal. These guests can access the network by providing their login credentials to the native supplicant on their device. |
Account states change based on the action taken on them. |
Created |
The accounts have been created, but the guests have not yet logged into a credentialed Guest portal. In this case, the accounts are assigned to guest types that are not configured to bypass the credentialed Guest captive portal. Guests must first sign in through the credentialed Guest captive portal before they are able to access other parts of the network. |
Account states change based on the action taken on them. |
Denied Accounts that expired while in a denied state remain as Denied. |
The accounts are denied access to the network. |
If you reinstate denied accounts, their states change to: All denied accounts that are not reinstated are purged in the next purge cycle. Denied accounts that expired cannot be extended (reactivated); you must create new accounts. |
Expired |
The time period for the account has ended. |
If you extend unexpired accounts, their states remain unchanged. If you extend (reactivate) expired accounts, their states change to: |
Pending Approval |
The accounts are awaiting approval to access the network. |
If approved, based on the guest type configuration, the account can be Active or Created. If denied, it appears on the Manage Accounts page as Denied. |
Suspended Accounts that expired while suspended remain as Suspended. |
The accounts have been suspended by you or another sponsor, who has the privilege to do so. |
If you reinstate suspended accounts, their states change to: |