ISE no redirect to origin URL after guest login

Hi, is there a possibility to redirect a guest user to the origin URL after he logged in successfully?
Right now the attached file is what the user sees after login.
Thanks!

The first method is local web authentication. In this case, the WLC redirects the HTTP traffic to an internal or external server where the user is prompted to authenticate. The WLC then fetches the credentials (sent back via an HTTP GET request in the case of an external server) and makes a RADIUS authentication. In the case of a guest user, an external server (such as Identity Services Engine (ISE) or NAC Guest Server (NGS)) is required because the portal provides features such as device registering and self-provisioning. The flow includes these steps:
The user associates to the web authentication Service Set Identifier (SSID).
The user opens the browser.
The WLC redirects to the guest portal (such as ISE or NGS) as soon as a URL is entered.
The user authenticates on the portal.
The guest portal redirects back to the WLC with the credentials entered.
The WLC authenticates the guest user via RADIUS.
The WLC redirects back to the original URL.
This flow includes several redirections. The new approach is to use central web authentication. This method works with ISE (versions later than 1.1) and WLC (versions later than 7.2). The flow includes these steps:
The user associates to the web authentication SSID, which is in fact open+macfiltering and no layer 3 security.
The user opens the browser.
The WLC redirects to the guest portal.
The user authenticates on the portal.
The ISE sends a RADIUS Change of Authorization (CoA - UDP Port 1700) to indicate to the controller that the user is valid, and eventually pushes RADIUS attributes such as the Access Control List (ACL).
The user is prompted to retry the original URL.

Similar Messages

ISE 1.2 redirect to origin URL after successful login

Hi, is there a possibility to redirect guests to the URL they tiped in, before they had to authenticate? We're running ISE 1.2., the webserver is running on it and after login the user has to retype the URL he wants to visit.. it would be great if the user would be automatically redirected..
Thanks!
KR

ISE is set up to do this with the latest patch (Patch 5). Now we are just waiting on new code for the rest of the NADs to implement this.
Actually, support was added to 1.2 P5, but it is up to access devices to add the support for forwarding the URL in redirect request to ISE. I believe WLC will be first to do so in 8.0 timeframe.

Redirect to custom url after successful authentication by OAM

Hello,
I need to redirect the user to some custom url instead of original requested url after successful authentication in OAM 11.1.2 (11g release2).
The requirement in my case is depending upon the user type and the region(one of the user's ldap attributes) it belongs to, it should be redirected to one of the 2 available applications.
I have tried implementing the same using custom authentication plugin in which I have used RedirectionActionContext class.
I have also tried setting plugin response as REDIRECT and specifying the custom page url.
I have also tried changing the "resource_url" parameter in authentication context.
However, none of above approaches are working.
Can anybody help me?
Thanks,
Purva

Hello,
I have exactly the same requirement. Have you solved the problem?
Thanks,
Purva

Auto Run URL after SSLVPN Login.

Hi,
Can anyone answer the following?
Is it possible to auto run a URL to an internal Web interface, right after a user logins into SSLVPN?
Instead of the user having to find and click the bookmark, can we make it auto run, somehow?
Thanks,
E

Hi Eric,
You are probably looking for a homepage, right? if so:
group-policy GroupPolicy_Tunnel_A attributes
webvpn
homepage value http://www.myintranet.com
Via ASDM:
Let me know if this answers your question.
Portu.
Please rate any post you find useful.

ISE Guest Access- Redirect to URL after successful logon

Currently, when guest users attempt to browse they get redirected to the guest portal. After login, they get a message that they can now access the original URL. Is there a way to automatically redirect to the URL they were trying to access, or remember the URL after they login?

ISE guest flow :
The user associates to the web authentication Service Set Identifier (SSID).
The user opens the browser.
The WLC redirects to the guest portal (such as ISE or NGS) as soon as a URL is entered.
The user authenticates on the portal.
The guest portal redirects back to the WLC with the credentials entered.
The WLC authenticates the guest user via RADIUS.
The WLC redirects back to the original URL

Invalid url after entering invalid credentials

Hi
when I give wrong password the autentication fails and stays on my login page(I expect this), but the url is geting suffixed by the global notification..
http://host1:7780/pls/apex/f?p=102:101:3194122067975525&notification_msg=Invalid%20Login%20Credentials/74C36FEDD43D0A58AB9DC5A238C36BFE/
End user is keeping entering the password but as the URL is wrong, he is not able to enter it.
Is there any way we correct the url after incorrect login?
I am using ldap authentication and have a function in database.
Edited by: user501385 on May 21, 2010 2:45 PM

Hi UserXY,
This is standard APEX behaviour. Messages are handed to the page by adding it as parameter in the URL.
After a successfull login you won't see the message anymore.
brgds,
Peter
Blog: http://www.oracle-and-apex.com
ApexLib: http://apexlib.oracleapex.info
Work: http://www.click-click.at

File data source not found with guest login???

Hello everybody,
i'm working with BIP 10.1.3.2.1 on Win2003/Tomcat.
Everytime if i call a report with a file data source directly via url or in the gui via guest login i get the following error message: "File data source not found: <file data source name>".
If i use a login in the gui which have the explizit permision to use this data source then there is no problem. Well at this point u might say then use this account, but - if i call a similar report with a database data source directly via url or guest login in the gui everything works fine. So, where is the point? Any ideas?
Best regards
Ralf Kanis

Hi guys,
I'm running into exactly the same issue. The problem seems to occur only when the report being accessed by guest is a file data source. The only other option I could think of is setting up SSO for BIP and the application issuing the URL to the report.
Could'nt find anything else in the documentation or known issues list that might fix this without having to setup Single Sign On. Any further luck with your investigation? I'd appreciate any feedback.
Thanks
Jonathan Cruz

Page Not Found Redirect Needs to include the original URL

See title. The apology rings hollow if you hide what it is that you won't resolve.
For example, what possible use does this give anyone?
http://social.technet.microsoft.com/Forums/error/notfound#c0f755e7-3bcf-4dc1-806e-13b977df7e98
In fact, it is a consequence of broken branding:
http://social.technet.microsoft.com/Forums/mvpforum/en-US/58cd4168-be4c-4a04-a172-d173e2655b4f/quotyour-pc-ran-into-a-problem-and-needs-to-restartquot-message-repeating-restart-problem#c0f755e7-3bcf-4dc1-806e-13b977df7e98
I.e. I was using the MVPForums as a starting point to look at My Threads, found one which was too big to open in a preview (201 posts) and middle-clicked on the Last Reply link, intending to look at it later (since I have Middle-click set up to open
new background tabs which can load while I go and do something else.) So coming back to a tab with no more context than a fragment for a Message-ID of an unknown thread is almost totally useless and requires me to go back and try to figure out what I
had done to generate that.
I even tried using View Source to try to find MVP in it, in case the URL would be embedded as a comment instead of as a link but no such luck. It really is a useless, very irritating diagnostic, made even more irritating by the very hollow "we're
sorry" years after this usability defect has been complained about.
BTW to add to my irritation over this there was also a horrible search experience, knowing that there were some current relevant threads in this forum but not being able to find them, using either the pathetic "relevance" filter which finds
ones that are too old or the OR-implied but non-Boolean-expression date filters which show nothing relevant.
Robert Aldwinckle

what's the value of including the URL of the page that you can't access?
So I could edit out the broken branding in the Address bar of a tab long after it was put there. That way if I miss the clue in the tab label that my launch didn't work I don't need to retrace my steps to try to figure out why it was there.
I was going to give you a more detailed example using a different thread and then thought I could do it with exactly this message. In addition I thought I would find out if there were any problems caused by branding when posting.
So, here is where Last Reply should go and therefore what should appear in my Address bar if I chose to open it in a new tab:
http://social.microsoft.com/Forums/mvpforum/en-US/2d07727b-7909-49d1-8f51-8f018ecdf3bb/page-not-found-redirect-needs-to-include-the-original-url?forum=reportabug#6f40fae0-3fb1-4ef0-96dc-f12f423b28fa
Using Middleclick on it made me think it had worked. E.g. the Tab label started out "Page Not Fou..." In fact, it did work but not for an example of what I wanted to demonstrate. That link can be branded when opened in its own
tab.
So, here is the one which gave me the idea that you might need an example.
Right-click, Copy Shortcut from a Last Reply link from a TechNet item in My Threads:
http://social.technet.microsoft.com/Forums/mvpforum/en-US/a4a7cc99-a49a-42a8-b2af-aff748623c34/windows-8-does-not-go-to-sleep-how-to-identify-the-deviceapp-preventing-sleep?forum=w8itprogeneral#30d98549-b381-4f69-ad09-6de25cd79316
Notice the mvpforum branding in the link? That is all that needs to be erased. Notice the GUID for the thread? Leaving me that at least could be useful. Instead, here is what "Page Not Fou..."s Address bar contains:
http://social.technet.microsoft.com/Forums/error/notfound#30d98549-b381-4f69-ad09-6de25cd79316
Useless--unless you can give me a search for
Msgid(30d98549-b381-4f69-ad09-6de25cd79316)
that can reliably find that thread.
Robert Aldwinckle

Web Auth Type: Customized(downloaded) Redirect URL after login not working.

         5508WLC as anchor controller with WLC1 and WLC2 with WCS. I have 2 public ssids set up to go directly to the internet.
Everything is working as it should. I downloaded the web auth bundle from Cisco and will just use a disclaimer page and then if the user clicks on the accept button they will be redirected to our company web page, and then they can get out to the internet.
I have edited the aup.html and login.html to say what I want it to. I have 2 different login.html pages and bundle to a .tar file like the documentation says. I download it via tftp to the controller and it is successful. The disclaimer page opens up when I connect and it looks as it should. The problem is I cannot seem to get the accept button to work. It redirects to a web page but it is undefined.
   I must be missing some setting somewhere, but I just can not seem to find it. Is there any line I need to edit in the login.html files that will redirect the page.    The config on the Web Login Page Redirect URL after login is http://www.mccg.org which is our home page.
Any help will be appreciated. I cannot seem to fine very good documentation, or I am just overlooking something.
Thanks
John

Your HTML code is wrong. Attach your code if your okay with it and I can check.
Sent from Cisco Technical Support iPhone App

ISE - CWA Redirection

HI
i am trying to implement guest portal and i have configure the ISE and switch to redirect guests and i see the whole process goes will when i issue
show authentication session interface GigabitEthernet1/0/11
            Interface: GigabitEthernet1/0/11
          MAC Address: 1078.d2fc.698c
           IP Address: 192.168.0.59
            User-Name: 10-78-D2-FC-69-8C
               Status: Authz Success
               Domain: DATA
       Oper host mode: multi-domain
     Oper control dir: both
        Authorized By: Authentication Server
          Vlan Policy: 81
              ACS ACL: xACSACLx-IP-TEST-WEBAUTH-DACL-519b76ec
     URL Redirect ACL: ACL-WEBAUTH-REDIRECT
         URL Redirect: https://HDOFFISEP01.mycompany.com:8443/guestportal/gateway?sessionId=0A0A6518000000010006F2B5&action=cwa
      Session timeout: N/A
         Idle timeout: N/A
    Common Session ID: 0A0A6518000000010006F2B5
      Acct Session ID: 0x00000003
               Handle: 0x0D000001
Runnable methods list:
       Method   State
       mab      Authc Success
       dot1x    Not run
my problem that the web browser does NOT direct automtically to the portal but it does manually when i copy the URL from the switch, any idea ?
switch configuration
boot-start-marker
boot-end-marker
logging monitor informational
enable secret 5 $1$PO2h$G1BUFwkbkA8ywc89FhBso/
username cisco privilege 15 password 0 cisco
username ise-rad-alive password 0 CICSOISEalive123
aaa new-model
aaa authentication login local local
aaa authentication dot1x default group radius
aaa authorization network default group radius
aaa authorization auth-proxy default group radius
aaa accounting auth-proxy default start-stop group radius
aaa accounting dot1x default start-stop group radius
aaa server radius dynamic-author
client 10.10.20.13 server-key myshared
client 10.10.20.14 server-key myshared
aaa session-id common
switch 1 provision ws-c2960s-24ps-l
ip dhcp snooping vlan 1-2000
no ip dhcp snooping information option
ip dhcp snooping
ip domain-name mycompany.com
ip name-server 192.168.10.40
ip device tracking probe use-svi
ip device tracking
ip admission name Webauth proxy http inactivity-time 60
vtp mode transparent
epm logging
dot1x system-auth-control
fallback profile Webauth
ip access-group ACL-WEBAUTH-REDIRECT in
ip admission Webauth
spanning-tree mode pvst
spanning-tree extend system-id
interface GigabitEthernet1/0/11
switchport mode access
switchport voice vlan 93
ip access-group ACL-ALLOW in
authentication event fail action next-method
authentication event server dead action reinitialize vlan 777
authentication event server dead action authorize voice
authentication host-mode multi-domain
authentication order mab dot1x
authentication priority dot1x mab
authentication port-control auto
mab
dot1x pae authenticator
spanning-tree portfast
interface Vlan1
no ip address
shutdown
interface Vlan80
ip address 10.10.101.24 255.255.255.0
ip default-gateway 10.10.101.1
ip http server
ip http secure-server
ip access-list extended ACL-AGENT-REDIRECT
remark explicitly prevent DNS from being redirected to address a bug
deny   udp any any eq domain
remark redirect HTTP traffic only
permit tcp any any eq www
remark all other traffic will be implicitly denied from the redirection
ip access-list extended ACL-ALLOW
permit ip any any
ip access-list extended ACL-DEFAULT
remark DHCP
permit udp any eq bootpc any eq bootps
remark DNS
permit udp any any eq domain
remark Ping
permit icmp any any
remark PXE / TFTP
permit udp any any eq tftp
remark Drop all the rest
deny   ip any any log
ip access-list extended ACL-WEBAUTH-REDIRECT
deny   ip any host 10.10.20.13
deny   ip any host 10.10.20.14
deny   ip any host 192.168.10.43
deny   ip any host 192.168.10.40
deny   ip any host 192.168.10.41
deny   ip any host 192.168.10.42
remark explicitly prevent DNS from being redirected to accommodate certain switches
deny   udp any any eq domain
remark redirect all applicable traffic to the ISE Server
permit tcp any any eq www
permit tcp any any eq 443
ip radius source-interface Vlan80
logging origin-id ip
logging source-interface Vlan80
logging host 10.10.20.11 transport udp port 20514
logging host 10.10.20.12 transport udp port 20514
radius-server attribute 6 on-for-login-auth
radius-server attribute 6 support-multiple
radius-server attribute 8 include-in-access-req
radius-server attribute 25 access-request include
radius-server dead-criteria time 5 tries 3
radius-server host 10.10.20.13 auth-port 1812 acct-port 1813 key myshared
radius-server host 10.10.20.14 auth-port 1812 acct-port 1813 key myshared
radius-server vsa send accounting
radius-server vsa send authentication

Verify that the redirection URL specified in Cisco ISE via Cisco-av pair "URL Redirect" is correct
CWA Redirection URL: https://ip:8443/guestportal/gateway?sessionId=SessionIdValue&action=cwa
802.1X Redirection URL: url-redirect=https://ip:8443/guestportal/gateway?sessionId=SessionIdValue&action=cpp

Http redirects not changing url in address bar

I'm going crazy trying to fix a major bug in our application. Http
redirects are not changing the url in the address bar of the latest versions of internet explorer. But this only happens if the redirected page is an xml page with an xslt reference for the browser to do the transformation. Mozilla seems to work fine, but I seem to have encountered a major bug in Internet Explorer. If anybody can help or at least point me in a direction I'd be SO grateful. This doesn't seem to be a java servlet specific issue, but that's what we're using so I thought I'd ask the question here too.
We have an MVC type framework we developed. For example, if you were to add something to a shopping cart, the url might be:
http://ecommerce.com/cart/add?sku=54321. In the add servlet, we would add the sku to your shopping cart and then redirect to, let's say,
http://ecommerce.com/displaycart. I think this is how most MVC frameworks work. And it works great for us.
The problem began when we started sending XML to the browser with an XSLT stylesheet. So now the browser does the transformations (if the browser is capable of doing them, which we check) instead of the server. This is a major part of our project. One of the reasons we started this.
The problem is that Internet Explorer no longer updates the url in the
address bar after a redirect. Mozilla works great though. We haven't
tested on other xslt capable browsers yet. In the example above, what would happen is after adding something to your shopping cart, the "displaycart" page would be shown but the http://ecommerce.com/cart/add?sku=54321 url would be shown in the address bar. It wouldn't seem to be too big of a deal since everything works. But now all the relative links are messed up. They start from the "cart" directory. So we need absolute links. But that introduces many other problems. We then need to know the host and the parent directories (not as easy as it seems).
So is there a solution? Is this a big bug that nobody has realized yet (or maybe they have, but my searches don't see it) in internet explorer? Is there a way for the redirected url to appear in the address bar from a browser-based xslt transformation in internet explorer? By the way, I'm testing with the latest version of IE6.0 as of July 7, 2003.
When testing, redirects work perfect if I do the xslt transformation on the server side and just send plain html to internet explorer. And it works perfect with either serverside or browserside xslt transformations in mozilla.
Scott Mueller
AccelerateBiz Incorporated

As I've been reading in the specs, microsoft, etc, it seems that it's not what's supposed to happen. But the specs are not very specific about this. However, internet explorer DOES always replace the url in the address bar with the redirected url if HTML is being returned from the redirected servlet. As is the case with all other browsers. So, at least, this behavior is the de-facto standard.
BUT when the redirected to page is an xml page which references an xslt stylesheet.. then, ONLY in internet explorer, the original url is what's shown in the address bar (and, more importantly, what's used as the base url). Regardless of what the links look like or how they're manipulated in the transformed HTML that ends up being shown, I can't seem to make the url in the address bar the redirected url..

Trying to mount my two websites and retain original URLs using CNAME

Hello all,
I purchased two domain names and have mounted both websites with my internet provider, but I have had constant problems with strange characters appearing. For example, I am unable to use quotation marks or other characters. After two years of trying, I have decided to use Mobile Me to mount my sites but wish to keep the same URL names. I've been told by the folks from whom I purchased the domain names that I simply need to update my information with them and it should work. Apple has suggested that the CNAME should be "web.me.com/mymobilemename/myoriginalsitename. When I try that, I am told by DomainPeople that the forward slash is not acceptable in the CNAME box. Any suggestions? I've been fussing with trying to "redirect" my sites and retain their original URLs for a month now and am unable to mount, make changes, update, etc. Feeling frantic!

had constant problems with strange characters appearing.
That can normally be fixed, see
http://homepage.mac.com/thgewecke/iwebchars.html
Apple has suggested that the CNAME should be "web.me.com/mymobilemename/myoriginalsitename.
No. CNAME is web.me.com and never anything more. What you wrote is used only for url forwarding and not CNAME.
You can't do two CNAMEs with one account. If you need to redirect two sites, you can use one CNAME and one url forwarding.

How can I create a redirect to an URL like in SICF?

Hi,
we offer the payroll (com.sap.pct.erp.ess.paycheck_service / sap.com/ess~rem/payslip2) in our portal which is a Java-WD. Whenever we import a modified version of the corresponding HRFORM into the P-system the application aborts with an error because the HRFORM has to be generated first after the import.
I wanted to get rid of this problem by using the SICF where you can define a redirect to an URL (I wantet to switch to a "service is under construction"-WD). Unfortunately the SICF can only be used for WD4ABAP-services as I know - not for Java.
Has anybody an idea how to solve my problem? I want to switch to a "service is under construction"-WD whenever there's an abort while processing the payroll application.
We don't have any Java skill.
Greetings,
Steff

You can place the html in component folder. src>mimes>Components. and can be accessed by code
try {
String url = WDURLGenerator.getAbsoluteWebResourceURL(wdComponentAPI.getDeployableObjectPart(),"<redirect>.html");
} catch (WDURLException e) {
wdComponentAPI.getMessageManager().reportException(e.getMessage(),true);
1) you can use the url to navigate to the redirect page or can try exit plug.
nikhil

I want to change the update colour of any hyperlink URL after I have visited it

I would like to change the highlight colour that my system applies after I have used any URL address link in the main display text. Currently it is a similar shade of blue to that of the original URL and I would like to change this to, say, red. Google tells me to edit one specific CSS file for making this change in Chrome, but I don't use Chrome!! A Windows Explorer search shows several hundred CSS files on my XP SP3 desktop running Firefox 34. Cana anyone help me please? Thanks in advance.

''LezLezLez [[#question-1036803|said]]''
<blockquote>
I would like to change the highlight colour that my system applies after I have used any URL address link in the main display text. Currently it is a similar shade of blue to that of the original URL and I would like to change this to, say, red. Google tells me to edit one specific CSS file for making this change in Chrome, but I don't use Chrome!! A Windows Explorer search shows several hundred CSS files on my XP SP3 desktop running Firefox 34. Cana anyone help me please? Thanks in advance.
</blockquote>
''Thanks for your reply = this has worked for me. Regards. LezLezLez.''

My original URLs won't ping

When I originally put my podcasts on iTunes, Apple gave me the following URLs
http://phobos.apple.com/WebObjects/MZStore.woa/wa/viewPodcast?id=210064273
http://phobos.apple.com/WebObjects/MZStore.woa/wa/viewPodcast?id=210065679
Recently while trying to redirect my feeds through Podango (by pointing Feedburner at Podango instead of Libsyn), I lost most if not all of my iTunes subscribers over a one week period.
In trying to figure out what was wrong, I discovered a problem with the Podango feeds. However, this problem has been fixed, but I still have two problems.
1. The original URL's from Apple fail to ping.
2. Pinging iTunes via Show ID instead of feed URL shows that ITunes is still pointing at Podango, when it should be pointing at Libsyn via Feedburner. (When the Podango feed was bad I changed it back so the Libsyn should not be redirecting to Podango.)
I am OK with the Podango redirect if I can find my missing subscribers. I wonder if there aren't people who think the podcast has left iTunes because of this problem and then unsubscribed, or if they are not showing up because they are pointed to the wrong place.
As of today, if I use the URL supplied by Apple it seems to link to the correct place on the iTunes store and it seems to download episodes (yesterday the episodes wouldn't download). Yet pinging still gives me "No Podcast Found for Ping Request."
Dr. Ginger Campbell
the Brain Science Podcast
Books and Ideas
intel MacBook and MacPro Mac OS X (10.4.6)
intel MacMini and intel MacBook Mac OS X (10.4.6)
intel MacMini and intel MacBook Mac OS X (10.4.6)

For these kinds of things, I usually subscribe to the podcast, then look at the "podcast description" which gives me the actual podcast URL. Punch that into Firefox which has the ability to read RSS feeds and then look at the source which shows me the XML.
Anyway, it was at the very bottom of the XML. Which was an odd place for it since most people put it at the top of the feed....probably why the Libsyn guys missed it.
-----snippet from your feed--------
<item>
<title>Books and Ideas #5 How are Science and Philosophy Related?</title>
<description>#5 How are Science and Philosphy related? I explore the common heritage of science and philosophy. Show Notes are at http://booksandideas.com. Please send me comments at [email protected] or visit iTunes and leave a review. </description>
<guid isPermaLink="true">http://www.podango.com/podcast.php?podcastId=649&episodeId=24218</guid>
<pubDate>Fri, 19 Jan 2007 02:31:01 EST</pubDate>
<enclosure url="http://download.podango.com/mp3tracker/24218/file.mp3" length="14251550" type="audio/mpeg" />
<itunes:author></itunes:author>
<itunes:subtitle></itunes:subtitle>
<itunes:summary>#5 How are Science and Philosphy related? I explore the common heritage of science and philosophy. Show Notes are at http://booksandideas.com. Please send me comments at [email protected] or visit iTunes and leave a review. </itunes:summary>
<itunes:keywords></itunes:keywords>
<itunes:explicit>no</itunes:explicit></item>
<itunes:new-feed-url>http://www.podango.com/feeds/feed.php?pid=649</itunes:new-feed-url>
</channel>
</rss>

ISE no redirect to origin URL after guest login

Similar Messages

Maybe you are looking for