Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About JesusCasero
JesusCasero
Here to help
Member since May 31, 2022
Oct 30 2023
Community Record
20
Posts
2
Kudos
0
Solutions
Badges
Jul 18 2023
5:23 AM
Thanks, @Ryan_Miles, it seems to be indeed the way it works. We're gonna need to refactor the app only because of the MGs... 😕 Kind regards, JC
... View more
Jul 17 2023
4:52 PM
Thank you, @Ryan_Miles. Do you mean to say that "lanIp" would yield a non-null value only querying the network level endpoint? And can you maybe confirm if this is specific to cellular gateways? It would be great if you could share more details about the support case you're mentioning. Thanks in advance, JC
... View more
Jul 17 2023
1:12 PM
Hi everybody, I am facing an odd issue. I am polling the Dashboard API to gather inventory details from the pool of deployed cellular gateways. The issue is with the "lanIp" attribute: if I query the /api.meraki.com/api/v1/organizations/<org_id>/devices endpoint, I get a '"lanIp" : null' KV pair in the response; however, querying the /api.meraki.com/api/v1/networks/<newtwork_id>/devices endpoint, the "lanIp" attribute gets properly populated with the assigned IP. This is issue appears to happen only with MG devices, the responses for other models seem to be consistent, with the exception of some details like "configurationUpdatedAt" or "productType" which are available only on the "networks" endpoint. Thanks in advance for your replies. JC
... View more
Dec 14 2022
12:37 PM
Hi, No, actually I am rolling it out together with multiple IdP definitions consumed by the IdP-initiated SAML SSO feature and works like a charm. Your issue sounds like a problem with the ACS definition on the IdP side. Regards, JC
... View more
Dec 1 2022
1:13 PM
2 Kudos
It makes sense the fact that it is used for certain purposes in the case of MSP-like accounts, and it makes sense also that it has to do with notifications. Thanks, buddy! Regards, JC
... View more
Dec 1 2022
1:11 PM
I have found out it is not always available; the reason could be connected to how the account is setup, whether as MSP or not. It adds up with @PhilipDAth answer.
... View more
Dec 1 2022
1:01 PM
Thank you, Philip. This is a very specific use case so I wanted to gather inputs before even trying it out. Kind regards,
... View more
Dec 1 2022
12:57 PM
Thanks, Philip, for some reason it didn't work for SP-Initiated SAML SSO when I tested it but I will give it a try again out of curiosity. It would not really meet the requirements of our security posture but it could be a good workaround in some other scenarios. To be honest, I could not have figured out that the "username" SAML attribute value could be anything but an email address, as it happens for locally defined accounts. Regards, JC
... View more
Dec 1 2022
11:25 AM
One of our customers has enabled SAML SSO and defined their IdP to make use of the IdP-initiated SAML SSO feature. We are planning to enable the SP-Initiated SAML SSO feature using our (additional) IdP: is that supported? Is the "SP SAML IdP" definition being used exclusively for SP-Initiated requests? The documentation says so ("SP-Initiated SAML is fully cross-compatible with IdP-Initiated SAML (both can be used at once)") but I'd like to know if anybody has successfully dealt with this scenario, because the SP-Initiated SAML is still an early access feature. Thanks! JC
... View more
Dec 1 2022
10:51 AM
Dec 1 2022
9:53 AM
Hi folks, Is there any way to override the current limitation when the same account name attempts to log in to different organizations, being SP-Initiated SAML SSO enabled on one of them and the account locally provisioned on the second organization? Regards, JC
... View more
Dec 1 2022
9:03 AM
Hi, I have an easy one today: what is the difference between the "Full" and "Enterprise" options when defining the organization access level for a new administration account? Cannot find anything in the documentation... Thanks in advance, JC
... View more
Oct 20 2022
3:04 AM
Yes, I'll most likely go down that path...
... View more
Oct 20 2022
2:55 AM
Hi folks, I'd like to know if (and if so, how) Cisco can act as IDP to provide SSO to customer organizations to both internal employees (using the individual's CEC) and external users (via CCO). There is an ask for an MSP for which my organization provides managed services to enable SSO in order to access their customers' dashboards. Should I funnel this request directly through Cisco IT? Thanks everyone in advance! Jesus Casero
... View more
Labels:
- Labels:
-
Administrators
Jun 1 2022
3:33 PM
Hi Philip, Thanks for the suggestions, appreciated. However, the only option that fits for purpose in this case from the Day 2 perspective is to override 2FA. Obviously, since it is not technically possible, we will need to put a small IAM process around this account. Regards, JC
... View more
May 31 2022
2:20 PM
Thanks for the clarification, I am aware that it won't be an issue for programmatic access but interactive login will be also required from time to time: "The account will authenticate to the dashboard API using the API key generated for the account, rarely it will be used for interactive sessions, only as soon as it is given access to new organizations and login to the GUI is required to validate the addition" Regards, JC
... View more
May 31 2022
2:14 AM
I was afraid that would be the case but I needed to ask. Thank you!
... View more
May 31 2022
1:26 AM
I need programmatic access to the Dashboard API of an MSP customer and I am provisioning an administrative account that would be pretty much unmanned but with access to all the current and upcoming organizations. My question is: if 2FA is enforced at the organization level, is there any way to exempt specific accounts of adhering to the 2FA requirement? The account will authenticate to the dashboard API using the API key generated for the account, rarely it will be used for interactive sessions, only as soon as it is given access to new organizations and login to the GUI is required to validate the addition. I'd like to avoid binding the second factor to SMS received on a phone number or a Google Authenticator OTP. Thanks in advance!
... View more
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 2 | 2399 |
© 2024 Cisco Systems, Inc.
