Self Registration Guest Access

This is a complete newbie question, but I can't seem to find the answer in any of the technical pages. We would like to set up a guest access point for visitors to our business, but we would like to require them to self register the first time they use the facility. I know that the WAP321 allows guest access and authenticated users, but can't discover if it will allow first time users to register for access.
Can anyone advise? If not, can you suggest a product that does?
Thanks
Peter

Hi Peter, thank you for using our forum, my name is Luis I am part of the Small business Support community. I am glad to assist you with your configuration, but I don't understand so well what do you mean “self-register the first time they use the facility”?
Captive Portal allows you to block wireless clients from accessing the network until user verification has been established. You can configure CP verification to allow access for both guest and authenticated users. The database can be stored locally on the WAP device or on a RADIUS server. But this feature will always request the authentication, to provide access
You could see more details about Captive Portal in the admin guide in page 143.
Also here you will see some steps to configure it, if this feature works for you.
Please let me know if you find this answer useful,
Greetings,
Luis Arias.
Cisco Network Support Engineer.

Similar Messages

ISE 1.2 Guest Self Registration

We are in the middle of an ISE deployment. We are currently on version 1.2, Patch 3. One of our use cases for ISE is Guest Access. I am trying to understand more about self registration functions in ISE. What are the capabilities? Can a user access a self registration page, enter credentials such as an email address, or phone #, and receive an email or text message with the guest account credentials?

yes Guest can acess self registration page and enter his name company email phone etc...and do self registration and can get the credentials via mail and sms
http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_guest_pol.html#pgfId-1482408

ISE guest self-registration Client Limitation per day

I deployed ISE with guest self registration on the Web Portal.
I want the guest (ex: AndroidPhone with Mac address: xx:xx) to be able to get 1 hour of internet access per day.
I know that using Time profile I can limit the guest to 1 hour of access, but how can I give the guest access each day.
Requirements:
--- I want to make this phone create only one account. ( How can I limit his mac address from creating new accounts when his account will expire in one hour)?
--- After 1 day, I want to give the same phone access (I dont mind if it is a new account or the same account as the day before)
How can we make this happen? Otherwise, everytime the account expires, the phone will be able to auto-register with a new account.
Thank you

Question about ISE guest user account self registration

Dear Sir,
We will plan guest solution for my wireless network ( we have WLC5508 and 1142 access point ), our requirement is :
1. guest user access to an wireless guest SSID, open browser, it will redirect to web-auth page.
2. The web-auth page have a url and if user click the url, guest user then connect to another web page, guest user can input some information ( for examples : username, email, cell phone ,,, ) to create guest user account self. The expiration of the user account fix to one day.
3. the username and random password created for the guest user then send by SMS or email to guest user.
4. Guest user can use the username and password he received to login web-auth page to use guest wireless network
5. User activity information ( user create, login/logout, expire time, user IP address ... ) should be log.
Please help to verify the ISE with base license can meet our requirement. ( especially item 2 & 3 )
Best Regards,

Hi,
Guest registration is covered with base licenses.
Here is some material that will bring you up to speed:
http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5712/ps11637/ps11195/qa_c67-658591.html
Base:
Capabilities: Basic network access and guest access
Network deployment support: Wired, wireless, and VPN
License prerequisite: None
Perpetual license
Licenses are available for 100, 250, 500, 1000, 1500, 2500, 3500, 5000, 10,000, 25,000, 50,000, and 100,000 endpoints
Tarik Admani
*Please rate helpful posts*

Wireless Guest Users Self Registration

We are looking for a solution where for guest user self registration an email will be send to the employee/network admin for approval request before providing the network access to guest users.
Please let me know if ISE is having this feature. Also let me know the other options.

If you want to go through the process of having a employee or "sponsor" approve the account, why not just have the person who would be the appover create the account for the guest user and cut out the middle step? This is the process we have been using and so far so good! If abuse is a concern we try to keep tabs on that by occasionally checking the logs in ISE to see if any one user is creating many account or consistantly has an account that may be for non work related functions.

I want to integrate SMS gateway to Cisco ISE 1.2 and my question is SMS notifications are supported for Guest self−registration

I want to integrate SMS gateway to Cisco ISE 1.2 and my question is
SMS notifications are supported for Guest self−registration Services ? or it should be done by Sponsor

I'm not sure I understand the question. Do you want to log in to the Sponsor Portal using AD credentials?
Create an Identity Source Sequence using AD as an Authentication Source. Go to Administration > Identity Management > Identity Source Sequences. Either Edit or +Add a Sequence and choose from the Authentication Sources shown.
Then choose that Identity Source Sequence by going to Administration > Web Portal Management > Settings. Double-click Sponsor from the Left Menu and click Authentication Source. Choose the Identity Source Sequence. Click Save.
I hope this helps.
Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question. Otherwise, feel free to post follow-up questions.
Charles Moreton

Customize Guest Self Registration on CPPM to print receipts immediately after registration

This article talks about printing the registration receipt automatically after registration.
Environment: This article implies to CPPM 6.2 and greater.
I want to get a printout of "Visitor Registration Receipt" automatically without using the print option.
We can achieve by adding a PHP code in the Footer section of the Receipt page.
Login to Clear Pass Guest Module and navigate to "Home » Configuration » Guest Self-Registration".
Select the profile which we are using and Edit.
Select the profile which we are using and Edit.
Click on Footer and add the PHP code as shown below.
{literal}
<script type="text/javascript">
window.print('guest_receipt.php?id=8');
</script>
{/literal}
Save and apply.
We can also force redirect to registration page after the print of receipt is done by adding the below code in the same place.
<meta http-equiv="refresh"
content=2;url=<YOUR GUEST REGISTRATION PAGE>?_clear=1"/>
The above code will refresh the page and redirect you back to self registration page.

Hi,this code did not work for me. It redirects me to the main CPPM admin login page  This is your code: <meta http-equiv="refresh"
content=2;url=<YOUR GUEST REGISTRATION PAGE>?_clear=1"/>  and this is my codein the footer of the receipt page: {literal}
<script type="text/javascript">
window.print('guest_receipt.php?id=8');
</script>
{/literal}
<meta http-equiv="refresh"
content=2;url=guestreg.php?_clear=1"/>  Can anyone herlp please?

Self registration - who should I be logged in as when creating the ua access schema?

The documentation is not specific about this, I'm assuming you should login as portal30 or portal30_sso. Could someone please confirm. Thanks.

Step 1 says to start SQL*Plus and login to the database in which the Login Server is installed. From what I have learned, the Login Server is the same as Single Sign On (SSO) Server. So I logged in as portal30_sso to create the schema for portal30_sso_ua.
I am not an Oracle DBA and was not sure of how to create the schema. I learned that all you have to do is create a "portal30_sso_ua" user and the schema gets created automatically. That is what I did.
I was able to get the Self Registration working for Windows NT, but only after correcting 4 bugs with the selfreg.cmd that is run in step 8. So, if you doing this on Windows, reference the following discussion thread for the bug fixes to the script:
http://technet.oracle.com:89/ubb/Forum70/HTML/002208.html.
Good luck.

Self registration with Approval

Hi,
I need to understand how this self registration with approval works. What we need in something on these lines
user self registers -> approver approves -> user gets access to portal
Can i create a user without any role assigned the him and when the approver approves, automatically some pre-designated role gets assgined to the user? I want my approver to just click on approve YES and not actually get into UME stuff.
Please help
-Alpana

Thanks for the reply Michael.
Yes, i have already gone thru company based self registration. But it does not specify the role assignment part :(. What i read was ok ... you register then u get assigned to the portal as guest user and then if approver approves the request the user becomes a COMPANY user. But then when the approver approves the request, does he assign the company related roles to the user? Or can that be coded somewhere?
Please help.
-Regards,
Alpana

Cisco ISE users self-registration Time Zone

Hello, everyone!
I'm configuring ISE Guest portal and I wonder why I need to choose time zone while in self-registration? Where is it used? And how can I disable this parameter from the self-registration page?

Time profiles provide a way to give different levels of time access to different guest accounts. Sponsors must assign a time profile to a guest when creating an account, but they cannot make changes to the time profiles. However, you can customize them and specify which time profiles can be used by particular sponsor groups. Beginning with Cisco ISE 1.2 time profiles are referred to as the account duration in the Sponsor portal.
Cisco ISE 1.2 includes these default time profiles, which replace the profiles available previously:
DefaultFirstLoginEight—the account is available for 8 hours starting when the guest user first successfully connects to the Guest portal. This replaces the DefaultFirstLogin time profile.
DefaultEightHours—the account is available for 8 hours starting when sponsors first create the account. This replaces the DefaultOneHour time profile.
DefaultStartEnd—sponsors can specify dates and times on which to start and stop network access.

Issue with example "Self Registration" workflow

Hi,
I am using OIM 11.1.1.5 on exalogic platform. I am trying to register the "Self Registration" workflow (http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/oim/oim_11g/Request_Workflow_for_Self_Registration/request_workflow_for_self_registration.htm), and I am currently stuck on step 13 of section "Registering the Custom Approval Process". When I run the ant script, the following error occurs:
[java] Exception in thread "Main Thread" oracle.iam.platform.workflowservice.exception.IAMWorkflowException: Tasklist mapping failed for workflowdefinition: default/SelfRegistrationApproval!1.0 due to Invalid Token Error in Verification Service.
[java] Invalid Token Error in Verification Service. Received invalid token in createContext.
[java] Verify that correct token is passed.
[java]
[java] at weblogic.rjvm.ResponseImpl.unmarshalReturn(ResponseImpl.java:234)
[java] at weblogic.rmi.cluster.ClusterableRemoteRef.invoke(ClusterableRemoteRef.java:348)
[java] at weblogic.rmi.cluster.ClusterableRemoteRef.invoke(ClusterableRemoteRef.java:259)
[java] at oracle.iam.platformservice.api.WorkflowRegistrationServiceEJB_f4otyb_WorkflowRegistrationServiceRemoteImpl_1035_WLStub.registerWorkFlowDefinitionx(Unknown Source)
[java] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
[java] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
[java] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
[java] at java.lang.reflect.Method.invoke(Method.java:597)
[java] at weblogic.ejb.container.internal.RemoteBusinessIntfProxy.invoke(RemoteBusinessIntfProxy.java:85)
[java] at $Proxy2.registerWorkFlowDefinitionx(Unknown Source)
[java] at oracle.iam.platformservice.api.WorkflowRegistrationServiceDelegate.registerWorkFlowDefinition(Unknown Source)
[java] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
[java] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
[java] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
[java] at java.lang.reflect.Method.invoke(Method.java:597)
[java] at Thor.API.Base.SecurityInvocationHandler$1.run(SecurityInvocationHandler.java:68)
[java] at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
[java] at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
[java] at weblogic.security.Security.runAs(Security.java:41)
[java] at Thor.API.Security.LoginHandler.weblogicLoginSession.runAs(weblogicLoginSession.java:52)
[java] at Thor.API.Base.SecurityInvocationHandler.invoke(SecurityInvocationHandler.java:79)
[java] at $Proxy3.registerWorkFlowDefinition(Unknown Source)
[java] at oracle.iam.platformservice.workflowregclient.WorkflowRegistration.main(WorkflowRegistration.java:42)
[java] Caused by: oracle.iam.platform.workflowservice.exception.IAMWorkflowException: Tasklist mapping failed for workflowdefinition: default/SelfRegistrationApproval!1.0 due to Invalid Token Error in Verification Service.
[java] Invalid Token Error in Verification Service. Received invalid token in createContext.
[java] Verify that correct token is passed.
[java]
[java] at oracle.iam.platform.workflowservice.impl.WorkflowRepositoryImpl.mapWorkflow(WorkflowRepositoryImpl.java:132)
[java] at oracle.iam.platform.workflowservice.impl.WorkflowRepositoryImpl.registerWorkFlowDefinition(WorkflowRepositoryImpl.java:113)
[java] at oracle.iam.platform.workflowservice.impl.WorkflowServiceImpl.registerWorkFlowDefinition(WorkflowServiceImpl.java:230)
[java] at oracle.iam.platformservice.impl.WorkflowRegistrationServiceImpl.registerWorkFlowDefinition(WorkflowRegistrationServiceImpl.java:38)
[java] at oracle.iam.platformservice.api.WorkflowRegistrationServiceEJB.registerWorkFlowDefinitionx(Unknown Source)
[java] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
[java] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
[java] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
[java] at java.lang.reflect.Method.invoke(Method.java:597)
[java] at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
[java] at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
[java] at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
[java] at com.bea.core.repackaged.springframework.jee.spi.MethodInvocationVisitorImpl.visit(MethodInvocationVisitorImpl.java:37)
[java] at weblogic.ejb.container.injection.EnvironmentInterceptorCallbackImpl.callback(EnvironmentInterceptorCallbackImpl.java:54)
[java] at com.bea.core.repackaged.springframework.jee.spi.EnvironmentInterceptor.invoke(EnvironmentInterceptor.java:50)
[java] at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
[java] at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
[java] at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
[java] at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
[java] at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
[java] at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
[java] at $Proxy452.registerWorkFlowDefinitionx(Unknown Source)
[java] at oracle.iam.platformservice.api.WorkflowRegistrationServiceEJB_f4otyb_WorkflowRegistrationServiceRemoteImpl.__WL_invoke(Unknown Source)
[java] at weblogic.ejb.container.internal.SessionRemoteMethodInvoker.invoke(SessionRemoteMethodInvoker.java:40)
[java] at oracle.iam.platformservice.api.WorkflowRegistrationServiceEJB_f4otyb_WorkflowRegistrationServiceRemoteImpl.registerWorkFlowDefinitionx(Unknown Source)
[java] at oracle.iam.platformservice.api.WorkflowRegistrationServiceEJB_f4otyb_WorkflowRegistrationServiceRemoteImpl_WLSkel.invoke(Unknown Source)
[java] at weblogic.rmi.internal.BasicServerRef.invoke(BasicServerRef.java:668)
[java] at weblogic.rmi.cluster.ClusterableServerRef.invoke(ClusterableServerRef.java:230)
[java] at weblogic.rmi.internal.BasicServerRef.handleRequest(BasicServerRef.java:518)
[java] at weblogic.rmi.internal.wls.WLSExecuteRequest.run(WLSExecuteRequest.java:119)
[java] at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
[java] at weblogic.work.ExecuteThread.run(ExecuteThread.java:178)
BUILD FAILED
/u01/app/test/products/oracle/oiam/iam/iam/server/workflows/registration/registerworkflows-mp.xml:51: Java returned: 1
at org.apache.tools.ant.taskdefs.Java.execute(Java.java:108)
at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:288)
at sun.reflect.GeneratedMethodAccessor3.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.apache.tools.ant.dispatch.DispatchUtils.execute(DispatchUtils.java:106)
at org.apache.tools.ant.Task.perform(Task.java:348)
at org.apache.tools.ant.Target.execute(Target.java:357)
at org.apache.tools.ant.Target.performTasks(Target.java:385)
at org.apache.tools.ant.Project.executeSortedTargets(Project.java:1337)
at org.apache.tools.ant.Project.executeTarget(Project.java:1307)
at org.apache.tools.ant.helper.DefaultExecutor.executeTargets(DefaultExecutor.java:41)
at org.apache.tools.ant.Project.executeTargets(Project.java:1191)
at org.apache.tools.ant.Main.runBuild(Main.java:758)
at org.apache.tools.ant.Main.startAnt(Main.java:218)
at org.apache.tools.ant.launch.Launcher.run(Launcher.java:257)
at org.apache.tools.ant.launch.Launcher.main(Launcher.java:104)
The (partial) output for the OIM and SOA logs show more info about the error:
-> Log file: /u01/app/test/config/domains/iam_domain/mserver/iam_domain/servers/WLS_OIM1/logs/WLS_OIM1-diagnostic.log
[2012-10-19T15:39:57.247+11:00] [WLS_OIM1] [ERROR] [] [OIM Authentication Provider] [tid: [ACTIVE].ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: 0000JdrKWszBp2OMyizW6G1GWDJc00000Z,0] oracle.iam.platform.auth.providers.wls.OIMSignatureLoginModule login() Invalid Input username/password
[2012-10-19T15:39:58.242+11:00] [WLS_OIM1] [ERROR] [IAM-2010023] [oracle.iam.platform.workflowservice] [tid: [ACTIVE].ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: aa237de71e3bd332:5124202d:13a773e1e57:-8000-0000000000001525,0] [APP: oim#11.1.1.3.0] Tasklist mapping failed for workflowdefinition: default/SelfRegistrationApproval!1.0 due to Invalid Token Error in Verification Service.[[
Invalid Token Error in Verification Service. Received invalid token in createContext.
Verify that correct token is passed.
-> Log file: /u01/app/test/config/domains/iam_domain/mserver/iam_domain/servers/WLS_OIM1/logs/WLS_OIM1.out
<Oct 19, 2012 3:39:57 PM EST> <Error> <OIM Authentication Provider> <BEA-000000> <oracle.iam.platform.auth.providers.wls.OIMSignatureLoginModule login() Invalid Input username/password>
<Oct 19, 2012 3:39:57 PM EST> <Warning> <JNDI> <BEA-050006> <An attempt was made to look up versioned object "ejb.stateless.ClientLoginSessionService#oracle.iam.platformservice.api.ClientLoginSessionServiceRemote" from an external client or another application. This can potentially cause in-flight work of the application version not being tracked properly and thus being retired prematurely.>
ORABPEL-30503
Invalid Token Error in Verification Service.
Invalid Token Error in Verification Service. Received invalid token in createContext.
Verify that correct token is passed.
at weblogic.rjvm.ResponseImpl.unmarshalReturn(ResponseImpl.java:234)
at weblogic.rmi.cluster.ClusterableRemoteRef.invoke(ClusterableRemoteRef.java:348)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:178)
Caused by: ORABPEL-30504
Internal error in Verification Service.
Internal error in Verification Service for user weblogic_idm. hasPermission.
Check the underlying exception and correct the error. If the error persists, contact Oracle Support Services.
at oracle.bpel.services.workflow.verification.impl.VerificationService.hasPermission(VerificationService.java:3711)
at weblogic.rmi.cluster.ClusterableServerRef.invoke(ClusterableServerRef.java:230)
... 3 more
<Oct 19, 2012 3:39:58 PM EST> <Error> <oracle.iam.platform.workflowservice> <IAM-2010023> <Tasklist mapping failed for workflowdefinition: default/SelfRegistrationApproval!1.0 due to Invalid Token Error in Verification Service.
Invalid Token Error in Verification Service. Received invalid token in createContext.
Verify that correct token is passed.
>
-> Log file: /u01/app/test/config/domains/iam_domain/mserver/iam_domain/servers/WLS_IAM_SOA1/logs/WLS_IAM_SOA1-diagnostic.log
[2012-10-19T15:39:58.035+11:00] [WLS_IAM_SOA1] [ERROR] [] [OIM Authentication Provider] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: aa237de71e3bd332:5124202d:13a773e1e57:-8000-0000000000001525,1:29948] oracle.iam.platform.auth.providers.wls.OIMSignatureLoginModule login() Invalid Input username/password
[2012-10-19T15:39:58.121+11:00] [WLS_IAM_SOA1] [ERROR] [] [OIM Authentication Provider] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: weblogic_idm] [ecid: aa237de71e3bd332:5124202d:13a773e1e57:-8000-0000000000001525,1:29950] [APP: soa-infra] oracle.iam.platform.auth.providers.wls.OIMSignatureLoginModule login() Invalid Input username/password
[2012-10-19T15:39:58.217+11:00] [WLS_IAM_SOA1] [ERROR] [] [oracle.soa.services.workflow.verification] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: weblogic_idm] [ecid: aa237de71e3bd332:5124202d:13a773e1e57:-8000-0000000000001525,1:29950] [APP: soa-infra] <.> hasPermission: error: access denied (oracle.security.jps.service.policystore.PolicyStoreAccessPermission Context:APPLICATION Context Name:soa-infra Actions:getApplicationPolicy)
[2012-10-19T15:39:58.217+11:00] [WLS_IAM_SOA1] [ERROR] [] [oracle.soa.services.workflow.query] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: weblogic_idm] [ecid: aa237de71e3bd332:5124202d:13a773e1e57:-8000-0000000000001525,1:29950] [APP: soa-infra] <.> Internal error in Verification Service.[[
Internal error in Verification Service for user weblogic_idm. hasPermission.
Check the underlying exception and correct the error. If the error persists, contact Oracle Support Services.
ORABPEL-30504
Internal error in Verification Service.
Internal error in Verification Service for user weblogic_idm. hasPermission.
Check the underlying exception and correct the error. If the error persists, contact Oracle Support Services.
at oracle.bpel.services.workflow.verification.impl.VerificationService.hasPermission(VerificationService.java:3711)
at oracle.bpel.services.workflow.verification.impl.VerificationService.createContextS(VerificationService.java:916)
at oracle.bpel.services.workflow.verification.impl.VerificationService.createContext(VerificationService.java:898)
at oracle.bpel.services.workflow.verification.impl.VerificationService.createContext(VerificationService.java:852)
at oracle.bpel.services.workflow.verification.impl.VerificationService.authenticateUser(VerificationService.java:692)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:178)
Caused by: java.security.AccessControlException: access denied (oracle.security.jps.service.policystore.PolicyStoreAccessPermission Context:APPLICATION Context Name:soa-infra Actions:getApplicationPolicy)
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
at java.security.AccessController.checkPermission(AccessController.java:546)
at oracle.security.jps.util.JpsAuth$AuthorizationMechanism$3.checkPermission(JpsAuth.java:436)
at weblogic.rmi.cluster.ClusterableServerRef.invoke(ClusterableServerRef.java:230)
... 3 more
[2012-10-19T15:39:58.224+11:00] [WLS_IAM_SOA1] [ERROR] [] [oracle.soa.services.workflow.verification] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: weblogic_idm] [ecid: aa237de71e3bd332:5124202d:13a773e1e57:-8000-0000000000001525,1:29950] [APP: soa-infra] <.> getContext: error: Internal error in Verification Service.[[
Internal error in Verification Service for user weblogic_idm. hasPermission.
Check the underlying exception and correct the error. If the error persists, contact Oracle Support Services.
[2012-10-19T15:39:58.225+11:00] [WLS_IAM_SOA1] [ERROR] [] [oracle.soa.services.workflow.query] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: weblogic_idm] [ecid: aa237de71e3bd332:5124202d:13a773e1e57:-8000-0000000000001525,1:29950] [APP: soa-infra] <.> Invalid Token Error in Verification Service.[[
Invalid Token Error in Verification Service. Received invalid token in createContext.
Verify that correct token is passed.
ORABPEL-30503
Invalid Token Error in Verification Service.
Invalid Token Error in Verification Service. Received invalid token in createContext.
Verify that correct token is passed.
at oracle.bpel.services.workflow.verification.impl.VerificationService.createContext(VerificationService.java:903)
at oracle.bpel.services.workflow.verification.impl.VerificationService.createContext(VerificationService.java:852)
at oracle.bpel.services.workflow.verification.impl.VerificationService.authenticateUser(VerificationService.java:692)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:178)
Caused by: ORABPEL-30504
Internal error in Verification Service.
Internal error in Verification Service for user weblogic_idm. hasPermission.
Check the underlying exception and correct the error. If the error persists, contact Oracle Support Services.
at oracle.bpel.services.workflow.verification.impl.VerificationService.hasPermission(VerificationService.java:3711)
at oracle.bpel.services.workflow.verification.impl.VerificationService.createContextS(VerificationService.java:916)
at oracle.bpel.services.workflow.verification.impl.VerificationService.createContext(VerificationService.java:898)
... 70 more
Caused by: java.security.AccessControlException: access denied (oracle.security.jps.service.policystore.PolicyStoreAccessPermission Context:APPLICATION Context Name:soa-infra Actions:getApplicationPolicy)
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
at weblogic.rmi.cluster.ClusterableServerRef.invoke(ClusterableServerRef.java:230)
... 3 more
-> Log file: /u01/app/test/config/domains/iam_domain/mserver/iam_domain/servers/WLS_IAM_SOA1/logs/WLS_IAM_SOA1.out
<Oct 19, 2012 3:39:58 PM EST> <Error> <OIM Authentication Provider> <BEA-000000> <oracle.iam.platform.auth.providers.wls.OIMSignatureLoginModule login() Invalid Input username/password>
<Oct 19, 2012 3:39:58 PM EST> <Error> <OIM Authentication Provider> <BEA-000000> <oracle.iam.platform.auth.providers.wls.OIMSignatureLoginModule login() Invalid Input username/password>
<Oct 19, 2012 3:39:58 PM EST> <Error> <oracle.soa.services.workflow.verification> <BEA-000000> <<.> hasPermission: error: access denied (oracle.security.jps.service.policystore.PolicyStoreAccessPermission Context:APPLICATION Context Name:soa-infra Actions:getApplicationPolicy)>
<Oct 19, 2012 3:39:58 PM EST> <Error> <oracle.soa.services.workflow.query> <BEA-000000> <<.> Internal error in Verification Service.
Internal error in Verification Service for user weblogic_idm. hasPermission.
Check the underlying exception and correct the error. If the error persists, contact Oracle Support Services.
ORABPEL-30504
Internal error in Verification Service.
Internal error in Verification Service for user weblogic_idm. hasPermission.
Check the underlying exception and correct the error. If the error persists, contact Oracle Support Services.
at oracle.bpel.services.workflow.verification.impl.VerificationService.hasPermission(VerificationService.java:3711)
at oracle.bpel.services.workflow.verification.impl.VerificationService.createContextS(VerificationService.java:916)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:178)
Caused By: java.security.AccessControlException: access denied (oracle.security.jps.service.policystore.PolicyStoreAccessPermission Context:APPLICATION Context Name:soa-infra Actions:getApplicationPolicy)
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
at java.security.AccessController.checkPermission(AccessController.java:546)
at oracle.security.jps.util.JpsAuth$AuthorizationMechanism$3.checkPermission(JpsAuth.java:436)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:178)
>
<Oct 19, 2012 3:39:58 PM EST> <Error> <oracle.soa.services.workflow.verification> <BEA-000000> <<.> getContext: error: Internal error in Verification Service.
Internal error in Verification Service for user weblogic_idm. hasPermission.
Check the underlying exception and correct the error. If the error persists, contact Oracle Support Services.
>
<Oct 19, 2012 3:39:58 PM EST> <Error> <oracle.soa.services.workflow.query> <BEA-000000> <<.> Invalid Token Error in Verification Service.
Invalid Token Error in Verification Service. Received invalid token in createContext.
Verify that correct token is passed.
ORABPEL-30503
Invalid Token Error in Verification Service.
Invalid Token Error in Verification Service. Received invalid token in createContext.
Verify that correct token is passed.
at oracle.bpel.services.workflow.verification.impl.VerificationService.createContext(VerificationService.java:903)
at oracle.bpel.services.workflow.verification.impl.VerificationService.createContext(VerificationService.java:852)
at oracle.bpel.services.workflow.verification.impl.VerificationService.authenticateUser(VerificationService.java:692)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:178)
>
From these logs, it seems that the user "weblogic_idm" either has an incorrect password set or does not have permission. I am still trying to work it out....any input would be much appreciated.
regards,
Evangelo

Thanks Asif!!
Steps mentioned in the meta link note were already taken care but the issue still exists.
Once we've added our custom page functions to the UMX_REG_UI_PERMS permission set in order to grant access to GUEST and GLOBAL users,the login issue was gone.
But when the go button in first page is clicked,it is again asking for credentials.
Do we need to do take care of any other setups/grants for this?
Please suggest!!
Thanks,
Siva

B2B Account Self Registration

Hi Experts,
I have a requirement to provide b2b account self registration on the B2B log on screen. I knew that this is not a default functionality provided by SAP.
I would like to know if there is any work around for this. Can I use Channel Partner registration with B2B?
Please let me know if you have configured/customized any similar solution.
Many Thanks,
Srinivasu

Hi,
Guest registration is covered with base licenses.
Here is some material that will bring you up to speed:
http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5712/ps11637/ps11195/qa_c67-658591.html
Base:
Capabilities: Basic network access and guest access
Network deployment support: Wired, wireless, and VPN
License prerequisite: None
Perpetual license
Licenses are available for 100, 250, 500, 1000, 1500, 2500, 3500, 5000, 10,000, 25,000, 50,000, and 100,000 endpoints
Tarik Admani
*Please rate helpful posts*

ISE 1.2 Self Registration

Hi
I have set up self registration on an ISE 1.2 and am using a customised portal.
Everything works OK except for one annoying element.
Although I have assigned a time profile of 30 days as a test - the self registered accounts always expire after 5 days.
Any ideas about this?
Regards
Roger

Hi Roger,
I have done this before and don't recall having issues. Can you post some screenshots of the ISE guest configuration and time profiles screens?
Also, what patch are you on?
Thank you for rating helpful posts!

How to populate a field on the Self Registration Approval Form?

Hello,
I have a field named SSN (last 4 digits of the SSN) that a self registered user must fill in during self registration. After the user submits the request, the request is submitted to a reviewer.
This reviewer logs in and accesses the Self Registration Approval Form for that particular request. I would like to display the possible returned values of SSN that I query from HR based on the requester's firstname, middlename, and lastname. This will allow the reviewer to verify the requester's identity. If the entered SSN does not match the displayed SSN, the reviewer can take the proper action.
How can this be accomplished?
I looked into the prepopulate rule generator adaptor. But I don't have a form to attach the adaptor to it since the approval form is an ootb form.
Thanks

Yes, I did.
In the adapter I mapped the adapter return value to the output of the java code (Get SSN).
In the User Registration Process Definition, I have a non conditional task named Get SSN. I mapped the requestID to the request Key and the adapter return value to the field on the self registration form (using User Definition field).
But the value did not show up in that field...

Help using Self-registration feature in 9.0.2

I have set up self-registration, selected Approval Required & then Configured it. As a member of a group that I created I cannot reject a users request to create their own account. I can do this successfully as the 'portal' user. My error is the following:
(WWS-00000)
Unexpected error encountered in wwsec_oid.delete_entry (50: Insufficient access) (WWC-41417)
What privileges do I need to add to my group so that I can accept or reject users requests? Thanks!

Chase
This has been answered in a previous thread. Please see 'How to reconfigure a new JPDK directory' a few pages back. He also provides you some nice links to the PDK you need to download.
Good luck.
Kellan Warren
Oracle
Abhinav Wrote...
It seems that you are trying to deploy JPDKv2 portlets on Apache which is fundamentally wrong. Portlets developed using JPDKv1 are deployed on Apache
while those developed using JPDKv2 are deployed on OC4J.
You can dowload the latest JPDKv2 from
http://otn.oracle.com/software/htdocs/devlic.html?http://download.oracle.com/otn/other/PDK.zip The downloaded pdk.zip contains full details of deploying portlets developed using JPDKv2.
If you want to leverage the Apache infrastructure, you will need to make ur Portlet JPDKv1 compatible & then deploy it
on Apache. You can visit
http://portalstudio.oracle.com/servlet/page?_pageid=2743&_dad=ops&_schema=OPSTUDIO It contains articles that should help you get started with JPDKv1.
Hope this helps.
Thanks & Regards,
Abhinav

Self Registration Guest Access

Similar Messages

Maybe you are looking for