Security

Reply
Regular Contributor II

Single SSID OnBoarding authentication

Hi Forum,

 

Can I have it configured where when a user provide EAP-PEAP credentials on thier smart device I redirecte them to the onboard page but not ask them to web authenticate again on the portal?

Guru Elite

Re: Single SSID OnBoarding authentication

When using an Aruba controller, yes, you can use Aruba ASO.

In most cases, dual SSID onboarding is recommended for security reasons.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Regular Contributor II

Re: Single SSID OnBoarding authentication

I can probably google "what is aruba ASO"

but can you elaborate?!

Guru Elite

Re: Single SSID OnBoarding authentication

Regular Contributor II

Re: Single SSID OnBoarding authentication

Thanks Tim, I was asking about something native without the need to idp. Cisco ISE does it by default when you onboard clients and I was curious to see if ClearPass has it as well out of the box.

Guru Elite

Re: Single SSID OnBoarding authentication

This is completely native in ClearPass and the controller. No external IdP is required.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Regular Contributor II

Re: Single SSID OnBoarding authentication

I should go watch that video.

 

Thanks again.

Guru Elite

Re: Single SSID OnBoarding authentication

The video covers ASO with third party apps. It can also be used internally with ClearPass SAML functions like Onboard. It's covered in the SAML TechNote.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Regular Contributor II

Re: Single SSID OnBoarding authentication

Woow too many steps to get this simple task. I guess it is better than not having it at all. 

I figured ClearPass is always a step ahead of ISE and though it might be a check box.

Guru Elite

Re: Single SSID OnBoarding authentication

Do dual SSID onboarding ;)

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: