Skip to main content
marcy
New Member
March 27, 2018
Question

Guest Account Provisioning

  • March 27, 2018
  • 9 replies
  • 12768 views

Hello,

 

is it possible to add new guest accounts for wifi via rest api or cli without using the admin username?

we want to add guest accounts via our intranet solutions.

 

    9 replies

    emnoc
    New Member
    March 27, 2018

    I would guess yes but never seen this done in that fashion, but  have you looked at email-harvest and self-enrollment? This is what you can do and allow  the users to publish a email-address. I believe no expiration can be set via this method but it requires no admin or guestuser-admin. A hotel  WiFi would deploy something like this.

     

     

    Ken

     

    xsilver_FTNT
    Staff
    Staff
    March 27, 2018

    Hello,

     

    AFAIK adding guest account to the FGT via CLI/REST-API/GUI is not possible without admin or guest-admin account.

    Same on FAC where you can use REST-API as minimalist option but you would still need an account with enabled "Web service access" and so associated REST Api access key/token.

     

    Admin managed guest access gives you plenty of control over the users of your service (I would prefer this, but your service design might require a different approach).

     

    If you need lazy access with less control over it, you can use mail-collector as emnoc mentioned.

    And if you set it to deliver access password over email/SMS then you gain at least some control and verification that provided data are not completely falsified.

    Still keep in mind that user can utilize some short term temporary mail services like 10minutemail to hide his identity almost completely while still being able to get access to your site/service. So if your local law/regulation require you to be able to track the user, then email verification is not an option, and SMS verification might be option only if users can't legally get anonymous SIM cards or SMS services to hide their identity.

     

    Best regards,

    Tomas

    marcy
    marcyAuthor
    New Member
    March 27, 2018

    xsilver wrote:

    Hello,

     

    AFAIK adding guest account to the FGT via CLI/REST-API/GUI is not possible without admin or guest-admin account.

     

    Hello,

     

    this is no problem - but i need some examples how to i can create via rest api the user guest account(s).

     

    regards

    marcy
    marcyAuthor
    New Member
    March 28, 2018

    Nobody some idea?

    marcy
    marcyAuthor
    New Member
    April 9, 2018

    Up, nobody some idea?

    Baptiste
    New Member
    April 10, 2018

    Hi,

    If you need some help with API, you should go to https://fndn.fortinet.net

    you will find some docs and examples and a dedicated forum for API 

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.