Enable Approval for Guest request
Genian ZTNA can identify and manage visitors by creating Guest Accounts. Guest Accounts may be created by the Administrator or requested by the user.
This guide will help you to understand the process of Guest Account requests and approvals.
Note
User cannot login with the new account until Administrator or Sponsor approve the request.
How to submit Guest Account requests
Enable Request User Account Button On CWP
In order for Guest user to submit Guest Account requests on CWPpage, an Administrator must activate Request User Account Button.
Note
Make sure the Network Sensor is in enforcement mode and an Enforcement Policy is enabled to redirect unauthenticated users to the CWP.
- Go to Policy in the top panel
- Go to Policy > Node Policy in the left Policy panel
- Find and click Node Policy
- Find Advanced > Authentication Policy > User Account Request and choose On to configure features
- Click Update
CWP Address
http://(IP of Policy Server)/cwp
How to approve Guest Account requests
Guest users can login with the new account after their request is approved. There are three ways for approving Guest Account request: Administrator Approval, Email Approval and Instant Approval.
Case 1 : Administrator Approval
- How to configure Administrator Approval
- Go to Preferences in the top panel
- Go to Properties > Purpose > User in the left Policy panel
- Click a GUEST in the list
- Go to Options > Approval Options > Email Approval for Guest and choose Off to configure features
- Go to Instant Approval and Choose Off
- Click
Update
- How to Accept / Reject Guest Requests as an Administrator
- Go to Management > Request in the top panel
- Go to User Account Request > Request in the left Request Management panel
- Find Requests in the list. Click Checkbox of desired request(s)
- Click Tasks > Accept All or Reject All
Case 2 : Email Approval
- How to configure Administrator Approval
- Go to Preferences in the top panel
- Go to Properties > Purpose > User in the left Policy panel
- Click a GUEST in the list
- Go to Options > Approval Options > Email Approval for Guest and choose On to configure features
- For Email Approver and Choose Administrator, Existing User(Sponsor) or Both
- Click Update
- How to Sponsor approve Guest Account request by email
- Open 'User Account Request' E-mail in Sponsor's Inbox
- Click
Approve
button on E-mailWarning
If 'Failed to send Email' error occurs, please double check the Outbound Email Server configuration or Approver's Email address.
Note
In an environment where there is no network access to the Policy Server, Even if admins click the approve button in the mail, the approval is not processed.
Case 3 : Instant Approval
- How to configure Administrator Approval
- Go to Preferences in the top panel
- Go to Properties > Purpose > User in the left preferences panel
- Click a GUEST in the list
- Go to Options > Approval Options > Email Approval for Guest and choose Off to configure features
- Go to Instant Approval and Choose On
- Click
Update
How to view approval results
Case 1 : View Approval results on CWP
- Enable Request View Results button On CWP
- Go to Preferences in the top panel
- Go to Captive Web Portal> Design Template in the left preferences panel
- Choose a Template name
- Activate [View Results] Button
- Click
Update
Case 2 : Receiving Approval notification by Email
- How guest receive approval notification
- Go to Preferences in the top panel
- Go to Properties > Purpose > User in the left Policy panel
- Click a GUEST in the list
- Go to Request Field Options and move Email to right
- Click Update
Note
If the Guest Account request is approved by Administrator or Sponsor, the Email address in the request form will be notified.
Case 3: How to Check Approval results as an Administrator
- Go to Management>Request in the top panel
- Go to User Account Request > Results in the left Request Management panel
- Check a results of approval