Security

Hello all, 

We have been working to get a Clear Pass self registration portal up and working. We are planning to use a sponsor for the final approval. We have it working where the user can enter an e-mail address to get form and link for authorization sent to the sponsor. This e-mail address can be anyone but now looking for a way to lock this down to specific users? We remember seeing a drop down type thing in the past with the list of authorized sponsors that can use this? This would keep just anyone from creating a guest account to put any device they want onto the network. 

Thanks in advance ....  

Brent 

------------------------------
Aruba Newbie
------------------------------

Generally if you want to add sponsor lookup to your self rego page, you need to configure Operator Server like AD.

Home » Administration » Operator Logins » Servers

and add the sponsor_lookup field to your self-rego page.

------------------------------
If my post was useful accept solution and/or give kudos.
Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
------------------------------

As @ariyap mentioned, you can search for sponsors in the AD.
However, if you just want a short drop-down list of authorized sponsors in the "Sponsor's Email" field, you can predefine them in that field.

You need to switch the user interface in the sponsor_email field to a drop-down list and then enter the email addresses in the Options field in the format "Email Address"|"Display Name".

The guest will then see this drop-down list during self-registration and can select an entry from the list.

------------------------------
Regards,

Waldemar
ACCX # 1377, ACEP, ACX - Network Security
If you find my answer useful, consider giving kudos and/or mark as solution
------------------------------

OK .. is there something I need to apply once I make the switch. I changed the field but do not get a drop gown when I test 

Brent 

------------------------------
Aruba Newbie
------------------------------

Original Message:
Sent: Jun 06, 2026 04:25 PM
From: WR-b1fc8f
Subject: Clearpass self registration form - Sponsor question

As @ariyap mentioned, you can search for sponsors in the AD.
However, if you just want a short drop-down list of authorized sponsors in the "Sponsor's Email" field, you can predefine them in that field.

You need to switch the user interface in the sponsor_email field to a drop-down list and then enter the email addresses in the Options field in the format "Email Address"|"Display Name".

The guest will then see this drop-down list during self-registration and can select an entry from the list.

------------------------------
Regards,

Waldemar
ACCX # 1377, ACEP, ACX - Network Security
If you find my answer useful, consider giving kudos and/or mark as solution
------------------------------

Original Message:
Sent: 6/6/2026 4:26:00 PM
From: WR-b1fc8f
Subject: RE: Clearpass self registration form - Sponsor question

As @ariyap mentioned, you can search for sponsors in the AD.
However, if you just want a short drop-down list of authorized sponsors in the "Sponsor's Email" field, you can predefine them in that field.

You need to switch the user interface in the sponsor_email field to a drop-down list and then enter the email addresses in the Options field in the format "Email Address"|"Display Name".

The guest will then see this drop-down list during self-registration and can select an entry from the list.

------------------------------
Regards,

Waldemar
ACCX # 1377, ACEP, ACX - Network Security
If you find my answer useful, consider giving kudos and/or mark as solution
------------------------------

Hi.

Deleting the mac address from Endpoint Repository will do the trick.

Best, Gorazd

------------------------------
Gorazd Kikelj
MVP Guru 2025
------------------------------

Original Message:
Sent: Jul 01, 2026 02:48 PM
From: BB-null
Subject: Clearpass self registration form - Sponsor question

Figured out how to get to the field and made it a drop down list. Took me a bit to figure out that the text after the | is what is listed. Looks great so far. Just waiting to see what others think. Will get longer as we add this to other locations.

 

Now I just need to figure out how to remove the MAC cache if I delete an account. We were testing and could not seem to get our test account to clear out to retest. Once signed in it seemed to never redirect again even though we deleted the guest account. Figure missing a step someplace.

 

Thanks  

 

Brent Berry

Sr. Network Administrator

Mueller Industries, Inc.

(901) 759-7470 (O)

829-7470 (I)

 

Original Message:
Sent: 6/6/2026 4:26:00 PM
From: WR-b1fc8f
Subject: RE: Clearpass self registration form - Sponsor question

As @ariyap mentioned, you can search for sponsors in the AD.
However, if you just want a short drop-down list of authorized sponsors in the "Sponsor's Email" field, you can predefine them in that field.

You need to switch the user interface in the sponsor_email field to a drop-down list and then enter the email addresses in the Options field in the format "Email Address"|"Display Name".

The guest will then see this drop-down list during self-registration and can select an entry from the list.

------------------------------
Regards,

Waldemar
ACCX # 1377, ACEP, ACX - Network Security
If you find my answer useful, consider giving kudos and/or mark as solution
------------------------------