Security

Reply
Regular Contributor II
Posts: 229
Registered: ‎09-11-2013

Onboarding device enrollment from a secure SSID

Hi Forum,

2 SSID's TLS and open. What would be the best way to enroll (register) a BYOD device from the secure SSID so I can connect it to the open SSID and get the onboarding workflow.

So employee on the TLS connected device can enroll 1 device on the open SSID. I hope I'm making sense.

 

Thanks,

Guru Elite
Posts: 8,190
Registered: ‎09-08-2010

Re: Onboarding device enrollment from a secure SSID

I'm not sure I'm following. 

 

A standard dual SSID onboard would have a link at the bottom of the open captive portal with a link to the Onboard enrollment workflow.


Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Regular Contributor II
Posts: 229
Registered: ‎09-11-2013

Re: Onboarding device enrollment from a secure SSID

With dual, employee would have to provide AD credentials on the captive portal. I want to do this without AD but for devices that are pre registered.

Guru Elite
Posts: 8,190
Registered: ‎09-08-2010

Re: Onboarding device enrollment from a secure SSID

The Onboard workflow will always require some type of authentication whether
it be a ClearPass web login, SAML/SSO, or OAuth2.

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Regular Contributor II
Posts: 229
Registered: ‎09-11-2013

Re: Onboarding device enrollment from a secure SSID

Thank you for the clarification.

MVP
Posts: 505
Registered: ‎05-11-2011

Re: Onboarding device enrollment from a secure SSID

On that note Tim.. On a single SSID solution - how to get single sign-on working for the onboarding workflow using the authentication session from the .1x?


Regards
John Solberg

-ACMX #316 :: ACCP-
Intelecom - Norway
----------------------------
Remember to Kudo if a post helped you! || Problem Solved? Click "Accept as Solution" in a post!
Guru Elite
Posts: 8,190
Registered: ‎09-08-2010

Re: Onboarding device enrollment from a secure SSID

You can use Aruba Auto Sign-On with the caveat that you won't be able to do manual enrollment.

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Search Airheads
Showing results for 
Search instead for 
Did you mean: