ISE 1.2 AUP Multi-Portal Configuration

Currently we have ISE 1.2 configured using a multi-portal configuration. We use a guest portal for both Guest Access and for devices we consider non-compliant employee. Guest users are authenticated against an inernal user database in ISE, and the company owned devices auth against AD. If we login with a guest account that was created using the sponsor portal, we do not get the acceptable usage policy to check before getting access. If we login using the AD account, we do get the Acceptable Usage Policy to check before getting access. It appears this is the same portal, so why do we not get it for both?

for guest AUP configuration
AUP for posture assesment config

Similar Messages

ISE 1.2 AUP Mobile Portal

Hi all,
I have a problem with the new mobile portal which was introduced with ISE version 1.2.
I've configured our aup and the normal guest portal displays it correctly.
But the mobile portal shows a floating text without any seperate paragraphs. This is pretty much unreadable.
Does anyone know if it is possible to format the text somehow?
The editor does not allow any tags so that's not possible.

The Guest, Sponsor, My Devices, and Client Provisioning portals are localized into all supported languages and locales. This includes text, labels, messages, field names, and button labels. If the client browser requests a locale that is not mapped to a template in Cisco ISE, the portals display content using the English template. Using the Admin portal, you can modify the fields used for the Guest, Sponsor, and My Devices portals for each language individually, and you can add additional languages. Currently, you cannot customize these fields for the Client Provisioning portal. You can further customize the Guest portal by uploading HTML pages to Cisco ISE. When you upload customized pages, you are responsible for the appropriate localization support for your deployment. Cisco ISE provides a localization support example with sample HTML pages, which you can use as a guide. Cisco ISE provides the ability to upload, store, and render custom internationalized HTML pages.
Note :
NAC and MAC agent installers and WebAgent pages are not localized.

ISE 1.2 Multi-Portal Identity Group Mapping

Hi,
Quick question regarding the use of Multi-Portal on ISE 1.2: Is it possible to map a single portal to a certain identity group? e.g. I have a portal for guest users, to which only users in the "ACME_guests" identity group can authenticate. I have a separate Portal for employees, where only users of the "ACME_employees" group can authenticate.
I know that I can specify a separate authentication sequence for each portal (e.g. internal, guests, AD), but I cant find a possibility to map a group to a certain portal. This has the consequence that e.g. guest users can log into the employee portal, and getting a successful authentication message. Of course I can further restrict the access in another policy rule, but this isnt a very neat solution.
Anybody have any ideas? It seems so basic that it has to be possible somehow?!
Regards

You can redirect users so they can "stick" to one portal once they have successfully authenticated. There is a document regarding device registration web authentication. Basically after a user connects successfully you can redirect them to an AUP specially designed to statically assign users to a specific endpoint identity group.
In the end if a user logs into portal A they hit the DRW and accept, ISE dumps them into a endpoint group called PortalA, you can then tie this into a policy where the PortalA endpoint is denied association to any other open ssid you have in your design.
Here is the document -
https://supportforums.cisco.com/docs/DOC-26667
Tarik Admani
*Please rate helpful posts*

ISE multi-portal

I want to make another guestportal because the default one's language is incorrect. You can change the language of the sponsor portal quite easily but for the guestportal you have to adjust the html pages. I tried this but couldn't get the layout correct.
Is there a package available with better html pages and/or instructions?
Mathieu

Well, I left the fields as they were because they are hardcoded and cannot be edited. Today I tried to use the guest portal with my WLC but ran in some troubles. The url of the guestportal ends like this:
/guestportal/Login.action?portalname=nameofguestportal
But when you use it with a WLC there are some arguments added. You'll get this:
/guestportal/Login.action?portalname=nameofguestportal?arguments
The problem is that your browser or the ise is searching for a portal called: nameofguestportal?
Accompagnied by the questionmark the ise can't locate the portal and uses the default one.
I have another problem: there is a requiered file: "guest success file" but I couldn't find this in the delivered html pages by cisco.

How to create a multi-level configuration sales order?

Hi,
    My client use configurable material to sell computers. And the production mode is MTO. One sales order item correspond with a production order
    Now my client also sell array which consist of two computers, two storage, one UPS power etc. That means I must realize multi-level configuration. First, choose the computer type. Second, based on the choosed computer in first step, choose the cpu, disk and so on. And then based on the sales order item, there must be several production order related to the same sales order item.
    Now I have semi-finished product B1,B2--computer. Class type is 300. Many characteristics is allocated to the class. B type material has the BOM which consist of cpu,disk etc.
    Then I created the finished product A--array. Class type is 300. Allocated characteristics is the B1,B2. A has the BOM which consist of B1,B2 etc.
    When I create sales order, I can only config the first level,choose computers for A, can not choose cpu,disk for computers.
    So, how can I find a solution for this scenario?
    Thanks in advance.

Thanks, Waza
1. Does the Sales order BOM explode in the sales order?
No. Just one top item would be ok for my client.
2. Why do thy want this in the sales order? They can explode the BOM in the production order, do they then need pricing at the component level?
They do not need pricing at the component level. Exploding the BOM in the production order is acceptable. But how can I config the configurable material in components of production order?
I tried collective order, but the second level of configurable material can not generate production order. I just make use of special procurement 52 in MRP2 of top finished product. Is there something I missed?
Thanks again.

9iAS 1.0.2.2/Portal 3.0.9 - Installation Error at "Portal Configuration Assistant"

I was installing the iAS1.0.2.2 and at the Portal Configuration Assistant, at the 23% I received the following error:
"An unexpected error ocurred during the Install Process. Check the install.log ....."
(FYI this is the second time I try to install it and in both cases I received the same error at the same point, so I decided to ask for help)
At the end of the Install.log is the following:
=====================
STEP 7 : Installing WWC layer Components
INSTALL_ACTION : installWWC(): ..\..\bin\sqlplus portal30/portal30@<DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=TCP)HOST=administrator)(PORT=1521)))(CONNECT_DATA=(SID=virtual))) @..\..\portal30\admin\plsql\wwc\wwcinst.sql portal30 USERS TEMP wvinswwc.log USERS USERS portal30_NULL portal30_sso portal30_DEMO
ORA-00439: feature not enabled: Function-based indexes
Errors encountered in the Install process. Installation Aborted
=========================
I noticed during the installation, before the Configuration Assistant (aprox at 97%), the installation opened a DOS session and I could see some errors with some Indexes but I don't know in which Log are registered. maybe it can help to troubleshoot my above problem?
Operating System: NT4 SP6
Database: 8.1.7.0 standard edition
iAS 1.0.2.2 standard edition
both under the same machine
Let me know if there is any other info I can provide.
Tks in advance!

There has been some confusion around certification on SE over the past week. I want to clarify the situation.
We discovered an issue with the Portal on SE last week. We inadvertently used function based and bitmapped indexes (EE only features). This issue has been masked to date because the install proceeded normally after the errors were raised. In 3.0.9 we made the install more strict in that it will stop by default if it hits an unexpected error.
On further research, we have determined that these errors have little or no impact on the general functioning of the product and as such are maintaining the position that Portal 3.x is indeed certified on 8.1.7
Standard Edition.
There is unfortunately a necessary work around to the install issue (which we will rectify as soon as possible). In order to install on SE, you must execute the Oracle Portal Configuration Assistant (OPCA) from
the command line and specify the "verbose" mode (see next post). In this mode, the errors are ignored and the install proceeds appropriately.
Regards,
The Oracle9iAS Portal Development Team

Error in portal configuration assistant

Hi,
While trying to install Oracle instant portal, I am getting an error during portal configuration assistant step.
ORA-12154 : tns cannot resolve conn ...
What do I need to do in order to fix this error? I see a tnsnames.ora in 2 locations:
{oracle_home}/infra/network/admin
{oracle_home}/portal/network/admin
What is the reason for this error and what needs to be done to fix it.
thanks,
Samit

The services of infrastructure instance must be up before installing Portal or other Middle Tier instances.

ITS Host Name in portal configuration

I am in need of ITS Host Name in portal configuration,but i dont know what exactly i have to give for that.pls suggest me.
Thanks
Ramesh

ITS host name is :your portal name:8001

Business Intelligence middle tier portal configuration failed

Hello,
10g iAS Infrastructure Metadata repository was installed into existing 10g database at Machine A (Linux). Identity Management middle tier was installed at Machine B (Linux) without any problem. BI MT Software copied and linked at Machine B successfully. opca failed in configuration phase of installation with this error:
---8<---
Syndication and UDDI Configuration
ERROR :Unhandled exception. Configuration aborted. Main reason: Version table could not be found.
oracle.syndicate.install.InstallException
at oracle.syndicate.install.OSSCA.checkSchemaCompatability(OSSCA.java:1149)
at oracle.syndicate.install.OSSCA.getInstanceID(OSSCA.java:1058)
at oracle.syndicate.install.OSSCA.configSyndAppEntity(OSSCA.java:919)
at oracle.syndicate.install.OSSCA.installDefaultOIDData(OSSCA.java:622)
at oracle.webdb.config.SyndicationWiring.doSyndicationConfiguration(Unknown Source)
at oracle.webdb.config.PortalConfigAction.installAction(Unknown Source)
at oracle.webdb.config.PortalConfigAssistant$1.runTask(Unknown Source)
at oracle.ewt.thread.TaskScheduler.runTask(Unknown Source)
at oracle.ewt.thread.TaskScheduler.processTask(Unknown Source)
at oracle.ewt.thread.TaskScheduler$TaskQueue.run(Unknown Source)
at oracle.ewt.timer.Timer.doRun(Unknown Source)
at oracle.ewt.timer.Timer.run(Unknown Source)
at java.lang.Thread.run(Thread.java:534)
ERROR :Unhandled exception. Configuration aborted. Main reason: Version table could not be found.
OPCA_ERROR : Syndication Server Configuration Assistant Failed.
Portal configuration aborted....
---8<---
I think something wrong in portal metadata installed by RepCA. What is the name of "Version table"? Can I use original (imported from "new database repository") part of portal schema?
Thanks in advance,
Wit.

btw,
google:// and metalink:// brings no hits for solution or even mention of problem (forums:// too as always :c/), so I've try to:
1. Install MT BI software on Machine B (ignoring opca errors done OK).
2. Install Infrastructure metadata repository at Machine C (db v90150 done OK).
3. Implement the metalink://note.276688.1 (in process, report follows).
btw2,
JAVA$CLASS$MD5$TABLE is only table absent in RepCA's portal schema (in comparing with usual way installation). Treated it as a "version table" by opca?

SAP HANA Cloud Portal : Configuration of HCP with Cloud For Customer

Hi Experts,
In our organization we have C4C system we have requirement to configuration with SAP HANA cloud Portal.
1) What are the steps require in Cloud For Customer?
2) What are the steps require to access the HANA Cloud Portal and Configure it?
3) How to integrate Cloud For Customer with HCP?
4) How to create Websites and Add the Widget for Tickets and Service request created from cloud for customer?
Any Documentation for this Cloud For Customer and HANA Cloud Portal Configuration please share with me.
Many Thanks,
Mithun

hi,
Please find below the avilable public information about Support site edition -
Support Site Overview : http://scn.sap.com/docs/DOC-50078
Support Site (blog post)http://scn.sap.com/community/hana-cloud-portal/blog/2013/12/12/deliver-exceptional-customer-service-with-cloud-based-support-portal
CAC Admin guide - (search for configuring portal) - http://help.sap.com/saphelp_sapcloudforcustomer/en/PDF/EN-2.pdf
Cloud Portal configuration guide - SAP Mobile Documents
Soon we will put all public guides in a central location.
Thanks,
Inbal

T430s - cannot get supported multi-monitor configuration to work

Hi all,
I just purchased a new T430s and, overall, I've been very happy with it. However, I'm having trouble getting a particular multi-monitor configuration to work. Very simply, I am trying to get the very first configuration as is described on this page...
http://lnv.gy/15YWJnf
It is simply a 3-monitor setup where one monitor is external and hooked up via VGA, another monitor is external and hooked up via DisplayPort, and the third monitor is the actual laptop monitor. I simply cannot get this to work! I can plug in a single external monitor, but when I try and plug in a second, it always disables my laptop monitor, so I end up with only a 2-monitor setup. Can anyone please help?
*Also, I should note, I've called Lenovo Support 3 times after encountering this problem, and, suffice it to say, it was an EXTREMELY frustrating and discouraiging experience. All in all, I spent over 2 hours on the phone and each time, they essentially REFUSED to help me! They kept citing that it was a "configuration" issue and that it's not their problem, and then they'd forward me to another department which would then forward me right back to them. At one point, one rep said that I was essentially "**bleep** out of luck". Furthermore, when I was getting frustrated with the lack of help, I asked a rep to escalate the issue and allow me to talk to a manager. He said that he COULDN'T DO IT because the system wouldn't allow it, again, citing that it's a configuration issue and not their responsibility! Does anyone from Lenovo ever read these forums? Will someone PLEASE take ownership of this issue and help me out? I'm not asking for much! I just want to get a setup that you guys say is supported!
Sorry for the rant, but my interactions with Lenovo support have really been frustrating. Anyways, any help would be much appreciated. Thanks in advance!
Charles
Solved!
Go to Solution.

whoischarles,
Welcome to the forum! Thanks for the question and tweet about this thread. Thanks Lead_Org for getting us started... I know you have tried out a number of multiple display configs, so you may have some follow up suggestions....
As far as I know...
The T430s supports external displays a little differently than the T420s did, and differently than the T430 and T530 do. There are a number of different discussions on T430s multiple display configs in the forum - you might search a few and just browse them to see the combinations others have tried and their experiences. Here is one example. Here is another more recent.
Here is another more recent.
Here is an official tip with specific configs that Lenovo supports for the T430s.
From our official tip, it appears that you cannot have both the LCD and external VGA and displayport. I think you can have 2 external displayport displays and either a 3rd external via VGA port, or the built in LCD. I remember trying out some of these a year or so ago, and I seem to recall that you needed a dock to get 3 external, or 2 external and the internal LCD to work on the T430s.
Best regards,
Mark
ThinkPads: S30, T43, X60t, X1, W700ds, IdeaPad Y710, IdeaCentre: A300, IdeaPad K1
Mark Hopkins
Program Manager, Lenovo Social Media (Services)
twitter @lenovoforums
English Community Deutsche Community Comunidad en Español Русскоязычное Сообщество

Using Basic or Multi-tier configuration for WLS Clusters...

Ok,
          The scenario is: I'm using WLS6.1 (hopefully, version doesn't matter here)
          with three instances clustered. Each instance provides all Services:
          Servlets / JSPs/ EJBs / Database communication... I'm using the Basic
          configuration described on the BEA documentation....
          Now, I want to move forward to a Multi-tier configuration, where the first
          layer will serve Servlets and JSPs and the second layer will serve EJBs.
          The problem: On the first scenario, I was looking EJBs with the Default
          InitialContext() constructor without the environment, since everybody was on
          the same JVM...
          What do I have to do, so my Servlets start looking for EJBs on the second
          cluster now? Do I have to re-write every single lookup? Can I use a
          jndi.properties file on the first layer - on the presentation tier?
          Thanks in Advance,
          Marcelo.


          Thanks Patrick!
          But my actual problem starts here. The Servlets aren't mine. We have to support
          applications which run atop our product(which is a bunch of beans+RMI Objects
          running on the top of WLS) in a backward compatible way with a standalone.
          Will try and make a post if I can find a 'configurable' way out.
          Harish
          Robert Patrick <[email protected]> wrote:
          >Put the other server's PROVIDER_URL in a system property, property file,
          >whatever and
          >have the servlets explicitly use it when creating the InitialContext
          >to talk with the
          >other server...
          >
          >Harish Vajha wrote:
          >
          >> Hi Cameron,
          >>
          >> A -Djava.naming.provider.url nor jndi.properties would work. The problem
          >is like
          >> this:
          >> Say I have two WL servers hosting just EJBs: E1, E2. And I have a single
          >WL Server
          >> hosting just servlets: S1. Now I give the -Djava.naming.provider.url=E1(using
          >> http or t3) (or I provide the same thing using my own jndi.properties).
          >>
          >> The problem with this setup is that while starting up, the Server will
          >try binding
          >> every object(including the System bindings like wl.transaction.TransactionManager,
          >> wl.common.T3Services) to the other NS (in this case E1's naming service)
          >which
          >> is bound to fail, as they're already bound in that Server.
          >>
          >> The solution has to be a way to specify the java.naming.provider.url
          >only for
          >> the servlets (or the web app).
          >>
          >> Any ideas on how to provide a Webapp specific lookup address?
          >>
          >> Marcelo, if you've found a way out to separate, pl. make a post.. Thanks!
          >>
          >> Harish
          >>
          >> "Cameron Purdy" <[email protected]> wrote:
          >> >Hi Marcelo,
          >> >
          >> >With Weblogic, your performance will typically decrease if you go
          >the
          >> >route
          >> >that you are describing.
          >> >
          >> >Yes, you can do jndi.properties, however I believe you will find it
          >inside
          >> >one of the WL jars.
          >> >
          >> >Note that you can use java -D instead to define some of the JNDI properties
          >> >to point to the other cluster, but I can't remember them off-hand.
          >> >
          >> >Peace,
          >> >
          >> >--
          >> >Cameron Purdy
          >> >Tangosol Inc.
          >> ><< Tangosol Server: How Weblogic applications are customized >>
          >> ><< Download now from http://www.tangosol.com/download.jsp >>
          >> >
          >> >
          >> >"Marcelo Caldas" <[email protected]> wrote in message
          >> >news:[email protected]...
          >> >> Ok,
          >> >> The scenario is: I'm using WLS6.1 (hopefully, version doesn't matter
          >> >here)
          >> >> with three instances clustered. Each instance provides all Services:
          >> >> Servlets / JSPs/ EJBs / Database communication... I'm using the
          >Basic
          >> >> configuration described on the BEA documentation....
          >> >>
          >> >> Now, I want to move forward to a Multi-tier configuration, where
          >the
          >> >first
          >> >> layer will serve Servlets and JSPs and the second layer will serve
          >> >EJBs.
          >> >>
          >> >> The problem: On the first scenario, I was looking EJBs with the
          >Default
          >> >> InitialContext() constructor without the environment, since everybody
          >> >was
          >> >on
          >> >> the same JVM...
          >> >> What do I have to do, so my Servlets start looking for EJBs on the
          >> >second
          >> >> cluster now? Do I have to re-write every single lookup? Can I use
          >a
          >> >> jndi.properties file on the first layer - on the presentation tier?
          >> >>
          >> >> Thanks in Advance,
          >> >> Marcelo.
          >> >>
          >> >>
          >> >
          >> >
          >

Portal Configuration Assistant Installation

I tried installing IAS 9i in another machine where there is no Oracle database. I was successful until the Portal Configuration Tool. It seems to hung at about 22%. I checked the install.log. On the first part, it was able to obtain connection to another machine where my database is. But along the script where it is installing sequences, it lost its connection. Any ideas.

I have the same problem in a diffrent environment. My database (8.1.7) is on the same machine (NT4 SP5) as the 9iAS, which was installed correctly. The Portal Configuration Assistant hangs at 50%, 67%, ... with the "not connected to oracle" error in the log. And the database OracleServicePORTAL (my database) is terminated without any error message. Does your DB stay alive?
I got two hints, but they didn't solve the problem. Maybe they help you.
1) db_block_size must be >=8k
2) The Default Tablespace must be at least 150MB, not 100MB as told in the manual.
null

Portal Configuration Assistant failedon 10g OAS

Hi,
I'm getting "Portal Configuration Assistant" failed error when trying to install OracleAS 10g (9.0.4.0.0)Applcation Server.
I did all the pre-install stuff. I was able to install Infrastructure without any problem under /ias/oraDB using 'ias:dba'
But when I tried to install Applcation Server/BI & Forms using 'ias:dba" under /ias/oraAS, I got following errors:
"Configuration Assistants" "Portal Configuration Assistant" failed.
Can anyone please Help me?
Thanks in advance.
Sakivs

ummm...not exactly sure what you mena when you say "using 'ias:dba'"

R12 Single node to Multi-node Configuration

Hi All!
We have a single node setup (Applications and Database are on the same server). Now, our management decided to setup a Multi-node configuration and i'm the one who will do this.
The plan is to use Oracle ASM and RAC for the database and for the Application is to have a multiple application servers. For the database, we will be using a minimum of 3 servers and another 3 servers for the application. Is this possible? How can this be done. Can someone point or give some link or infos on how to do this. We're going to use the existing data on the single node server.
Thanks and Regards,
cmadiam82

Hi,
We have a single node setup (Applications and Database are on the same server). Now, our management decided to setup a Multi-node configuration and i'm the one who will do this.Contratulations. This is a good oppurtunity.
The plan is to use Oracle ASM and RAC for the database and for the Application is to have a multiple application servers. For the database, we will be using a minimum of 3 servers and another 3 servers for the application. Is this possible? How can this be done. Can someone point or give some link or infos on how to do this. We're going to use the existing data on the single node server.For a start you can read
http://gjilevski.wordpress.com/2009/12/13/rac-enabling-ebs-12-1-1/
http://www.appsdba.info/index.php?module=pagemaster&PAGE_user_op=view_page&PAGE_id=52&MMN_position=44:44
http://www.appsdba.info/index.php?module=pagemaster&PAGE_user_op=view_page&PAGE_id=61&MMN_position=57:57
Thanks

ISE 1.2 AUP Multi-Portal Configuration

Similar Messages

Maybe you are looking for