Symptom

When Guest users create registration they specify the Person Being Visited, this is the Sponsor email address. Issue is observed in ISE 3.2 patch 7, Sponsors which are part of active directory group Domain users are mapped to Sponsor Group type do not see Pending Accounts for approval when "Only pending accounts assigned to this sponsor" is enabled for the Sponsor Group. When Sponsor User login into the portal for first time Pending Accounts is visible, however if we logout and login Again we do not see the accounts. Issue do not affect Internaly created users in Cisco ISE.

Conditions

-Guest Portals with Sponsor Approval required. -Sponsor Account is part of Active Directory -Only pending accounts assigned to this sponsor is selected under Sponsor Group mapped to AD.

Workaround

Under Sponsor Group - > Approve and view requests from self-registering guests -> Select "Any pending accounts"

Further Problem Description