Automatic provision of WLAN profiles to cliets through ISE

Hi All,
Our customer was using L3 web auth for corporate users . LDAP was integrated directly with WLC for authentication . Now they want to use L2 web authentication WPA2/PEAP for corporate users . As per my understanding for using L2 auth , we need to create the appropriate SSID profile in end user laptops in order to associate with the SSID . Wheras L3 web auth , dont require that . Simply connect -> then open browser -> redirect to captive portal -> authentication. Customer was habituated with that.
Hence they dont want to manually create the SSID profiles in laptops . They hav got base ISE licnese(only for AAA). So is there any option to provide the WLAN profiles to customer laptops and mobile devices with the help of ISE .
Thanks,
Vijay

Hi Scott ,
This way users can click on the SSID and use their AD credentials to connect. Once they connect, the device will creat a profile and store it on the device.
So you mean to say , no need of creating the profile manually in laptop ? We have broadcasted test SSID with WPA2/AES . When we connect to the SSID with win 7 laptops its not asking for AD credentials . Simply it gives errror not able to connect. But when we manually configured the SSID in laptop and connect , it asks for credentials and succeed.
For latest mobiles , when we connect to the test SSID. it asks the credentials directly and succeed. The issue is for laptops only , that we need to create the SSID prfile manualy in laptops.

Similar Messages

Automatic Provisioning of resource through group membership

Hello,
I want to automatically provision a resource to a user if he is a member of a particular group.
I have created the group,creted access policy(with approval = No) as well as group membership for that group .
When I create a user and assign him the group and checks the resource assigned to him , that resource system validation remains in pending status.When I open the process form corresponding to it and without making any change just save it the resource assignment completes.
plz tell me what is to be done to make it completely automatic.
Thanks.

Go to Process Def of that resource and select Auto Save check box there and try.

WLAN Profile Config on Endhost

Hi All,
If we want to use SSID with WPA2 security (802.1x) for example, my understanding is we have to create WLAN profile in each and every user's laptop.
But it is not possible to do in a big organization. So is there any possibility to automate that..? Self provisioning ..?
Thanks in advance

Hi Prasan,
Yes, the wireless settings on every laptop needs to be configured.
To make this easy, from the Active Directory you can push a GP update.
This is used to configure the wireless settings on the laptop.
( Ex : Authntication type, Encryption type , Certificate Validation )
Please refer :
http://technet.microsoft.com/en-us/magazine/gg266419.aspx
Ease of management is one advantage. The main benefit through the Group Policy update, the administrator can have a better control over the wireless network. The options for the end user will be pre-configured and grayed out. The end user cannot edit the settings.
You can alos defive preferred networks and deploy certificates using a Group Policy.
Thanks
Victor
<>>

Camera Raw RC 8.6 does not automatically locate the lens profile for the new Canon 16-35mm f4 lens. The profile is in RC 8.6

I have loaded Camera Raw RC 8.6. It can not automatically locate the new Canon 16-35mm f4 lens, although the lens profile can be manually found.

Hi
I forgot to answer one question.
When I have a file from the Canon 16-35mm f4 lens in Camera Raw and go to
Lens Correction and check the box Enable Lens Profile Corrections, when I
select the model in the first box as Canon, it picks the wrong 16-35mm lens.
It picks the f2.8. I hope that you can get this fixed in Raw 8.6. It is
a major headache for the user of this new lens.
In a message dated 7/28/2014 3:10:44 P.M. Central Daylight Time,
[email protected] writes:
Camera Raw RC 8.6 does not automatically locate the lens profile for the
new Canon 16-35mm f4 lens. The profile is in RC 8.6
created by ccastleb (https://forums.adobe.com/people/ccastleb) in Adobe
Camera Raw - View the full discussion
(https://forums.adobe.com/message/6591754#6591754)

How to check on which APs a wlan profile is activated on WLC4402

Hello,
we use a wlc4402 and several wlan profiles which are activated on different access-points (wlan override).
Does anybody know if there is a possibility to see a summary list of the aps on which a certain wlan profile is activated?
Best Regards,
Thorsten

Hello,
I tested it but did not get the output I am looking for.
What I am looking for is a list of all wlan profiles and for each wlan profile a list of all ap where it's activated, e.g.:
wlan profile 1
ap1
ap2
ap3
wlan profile 2
ap2
ap5
ap7
Does anybody further know how I can set the cli terminal length to 0 so that there is no page break (as term len 0 in ios)?
Regards,
Thorsten

Automatically provision users in OCS 10g - where are the -p switches?

Hi,
in the past we used a bunch of scripts to automatically provision services to our nes OCS users. In OCS 9.0.4 (R2) we used the uniuser and unidsdiff commands for this.
As it seems that Oracle has left these switches behind in the new binaries in the OCS 10g, I wonder if anybody has found a possibility to provision OCS services to users without using either the provisioning console or having to enter a admin pw in the terminal?
This is more than bad, since I think that many customers of either the OCS 9.0.4.2 and stand alone calendars have been using this method for auto-provisioning and now Oracle has cut off this connectivity.
In case anybody knows a other way around I would be very interested it that.
Regards,
Stephan

Thanks Martin for replying.
What I understood is Attach a task which will check if resource X is provisioned or not, if not provisioned then initiate provisioning of ResX.
I think even in this case also , if we are trying to provision userA simultaneously Res1 & Res2 , after successful provisioning both resources, will trigger the task to check if ResX is provisioned or not , it will return false and both resource will trigger auto provisioning of ResX. Anyway I will try this option and update.
How can I use database lock to avoid race condition in OIM?Database it self will not allow creation of same user twice(violate unique constraint).

How to do automate provisioning and deprovisioning

Hi,
I am a student and doing the final year project in sunidm. can anyone tell me how to automate provisioning and deprovisioning in sunidm.
thanks

You need to identity all your possible actions that could occur for this object. Create, Enable, Disable, Revoke, What fields do you plan to update? Now write a connection code using an IT Resource for input paramters, and then code your actions. Create the process tasks for each, and attach your adapters, and map your variables.
-Kevin

Password mail after automatic provisioning in CUP

Hi Team,
I have enable automatic provisioning.
This results in creating a desire user with the stated role in the backend SAP System.
I am also receiving the mails for each stage.
However the mail which is recived as a notification to the user Says:
Your Account is created in System XYZ, your ID is ABC.
Click here to View password.
Now whe the user clicks on the link for pasword it takes to a screen which only has Password written in Header but the actual value is missing and the entire screen is blank.
Can anybody please help me to identify and resolve the problem.
Thanks!
Bets regards,
Charu

Please go to Configuration - Workflow - Reminders and look at the "Closing" tab.
There you'll find a setting to display the password for a longer time, or send it in the closing email.
Frank.

Enabling users and automatic provisioning

Hello,
I have a problem with automatic provisioning.
In our context, here is what we want to do :
- A user has a Start Date
- Once this user has reached this date, the scheduled task "Enable User After Start Date" enables him in OIM
- This activation gives a role to him
- Having this role starts the provisioning of AD and Exchange resources
And here is the problem we have :
- The user was supposed to start today
- The scheduled task ran at 2 AM and enabled him successfully
- He had the role
- But no resource provisioning started
Do you have any clue on why it happened and how to solve it ?
Thank you for your help !

Hi,
If the user having the role assigned.
Check currosponding rule is active or not. It should active
If it is active than,
Check are you able to do access policy based provisioning via UI or not?
Thanks,
Kuldeep

Armenian time is wrong in Apple server. I try to turn off automatically update,but then i cant call through facetime.

Armenian time is wrong in Apple server. I try to turn off automatically update,but then i cant call through facetime.

Not sure if this Term is Relevant towards an iPhone but, my iPhone won't Post unless if it's plugged into a Charger.

Steps to enable Automatic provisioning in OIM 11g

Hi,
I am trying to configure my OIM 11g to automatically provision the resource into OID.
I am able to do the provisioning manually but as per my requirement, when I register the user details in OIM the record must be created in OID automatically.
Can u please mention the steps I must follow for the same.
Regards

Hi Pk
I Checked the task "System Validation" status for the Resource.It was Pending as told I selected Auto Save in the process definition of the resource in design console.
Now my resource gets provisioned but only when I attach user to the Role created by me. By default user gets attached to the All Users Role.
What configuration changes should i make so that the user on creation gets attached to custom Role created by me.
Regards

WLAN Profile question

We happen to have a very large open wireless implementation that uses an external webauth page that authenticates against our RADIUS. We are also using the Lobby Ambassador for employees that drop in for a week or two at a time, and those users are on the same SSID as everyone else.
For obvious reasons, we want to secure our SSID with WPA2-802.1x. When we do this our Lobby Ambassador will no longer function since those temporary usernames and passwords will be in the controllers.
My question is this: Is there a way to use WLAN Profiles so that I can have a profile for WPA2 and our Lobby Ambassador under the same SSID? I understand the Lobby Ambassador users won't be secure and this isn't the best practice, but can it be done?
Thanks in advance,
Tim

/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;}
Hi Tim
No, you can’t have different security policy under one SSID. If you enable WPA/WPA2 with 802.1X, all client must use this to authenticate. But there shouldn’t be any problem to have two SSID, one for employees and one for external users, like guests and consultants.
Kind Regards
Johan

Setting different Proxy-Settings to different WLAN-Profiles

Hi,
i need to assign to some WLan-Profiles special individual Proxy-Settings. But somehow whenever i overwrite the settings and confirm them in the proxy-Settings-Tab, the next time i enter the proxy-settings are back to default "PAC".
Any ideas what i am doing wrong ?
Thanks in advance,
Gadrecs

I would:
create 2 separate browser profiles (A & B)
create 2 browser launchers for each profile A & B pointing to their relevant profile paths
start up launcher A & feed that proxy info for proxy A (internal)
start up launcher B & feed that proxy info for proxy B (external)
I know firefox & chromium can use profiles, others may differ.
OR if you use chromium just install Switchy (http://switchy.samabox.com/) & feed it the details for both proxies & click the relevant one you want to access at that time (bear in mind the proxy switch will affect the whole browser & it's child processes so you won't be able to have 2 tabs using different proxies)

Machine +User Auth for windows endpoint autheticating through ISE

Hi
Is there any way to use machine + user auth at same time when authenticating Windows machine through ISE. In Windows native supplicant there is option as
1) Machine OR user Auth
2) User Authentication
3) Machine Authentication
4) Guest authentication
I want to give more priveledge access to endpoints where they are joined to AD domain AND the user is logged in using AD credentials.
Is there any way to achieve this functionality ...

With windows you do not have the option, however with ISE 1.1.1 and the latest cisco anyconnect nam supplicant (which is free) has a feature called eap chaining, it uses eap-fast to send the authentication sequence just as you want.
Here is the reference:
ISE release notes
http://www.cisco.com/en/US/docs/security/ise/1.1.1/release_notes/ise111_rn.html#wp307279
Anyconnect release notes
http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect31/release/notes/anyconnect31rn.html#wp998871
Configuration of anyconnect -
http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect31/administration/guide/ac04namconfig.html#wp1065210
Tarik Admani
*Please rate helpful posts*

Automatic synchronization of Collection Profile in Business Partner

I'm in the process of implementing FSCM Collections Management in ECC 6.0 single system scenario.
I configured automatic synchronization of customers with business partners. Whenever a new customer is created, SAP is automatically creating corresponding business partners with general and collection profile tabs. If a customer is changed, SAP is automatically changing business partner general data. This process is working fine for general data.
However, I would like system to automatically update business partner collection profile data based on certain parameters maintained in customer master company code view. Is there any BAdI available for this purpose? I do know that it can be done through transactions UDM_BP_PROF or UDM_BP_GRP or enhancing these transactions through BAdI, but I prefer to do it at the time customer is created or updated.
Any suggestion will be appreciated.

Hi,
You can directly change the Coll specialist in the BP it self
Regards,
D vasanth
Edited by: vasanth_y18 on Jan 18, 2011 11:50 AM

Automatic provision of WLAN profiles to cliets through ISE

Similar Messages

Maybe you are looking for