Security

Hi All

I currently have an Active Directory authentication source setup that uses the %{Endpoint:Username} attribute in the filter, I use this to check the status of the users AD account when their devices does MAC auth, this works well.

I need to do a similar thing but with devices authenticating against the Guest Device Repository using sponsor_name in the AD auth source filter. Can anyone tell me how I would reference the Guest User Repository sponsor_name within the filter of an AD auth source.

Thanks

Dave

Hopefully I'm remembering correctly, but I think you can only use the Computed Attributes in queries for Auth Sources.  Check the Access Tracker for a session that has authenticated in the manner you are after and see if one of the GuestUser attributes has the information you are after.  If you find that, duplicate the filter in the AD auth source and insert the new attribute in place of %{Endpoint:Username}.

Thanks for the info, looks like I can't get what I need so I duplicated the [Device Registration Disconnect] service and added an enforcement profile that copies the sponsor name to the endpoints repository, and used my original authentication source.