An engineer is configuring sponsored guest access and needs to limit each sponsored guest to a maximum of two devices. There are other guest services in production that rely on the default guest…

While ISE identity groups are used for organizing users, limiting the number of logins per user is typically a function defined within guest types or authorization policies, not directly tied to an identity group's inherent settings.

In Cisco ISE, 'Guest Types' define various parameters for guest accounts, including the maximum number of devices a guest can register. By creating a new guest type for the sponsored guests and setting the device limit to two, this specific requirement can be met without impacting other existing guest services or their associated guest types.

Creating an LDAP login for each guest is impractical for guest access and does not directly address the requirement of limiting the number of devices per guest.

Sponsor groups define which sponsors can create guest accounts and their privileges, but they do not directly control the number of devices a guest can register; that is a parameter of the guest type.