o.k. current update
Support engineer wants to create an onboarding service from scratch. What I was doing before was authenticating onto eduroam using eap-peap and then accessing https://clearpassdev.york.ac.uk/guest/device_provisioning3.php which then configured my iphone to use eap-tls. Everything worked except for the fact that the cert length was 1.5 hours.
Now the intention is to use the clearpass template for creating onboarding servicesto set things up and access it from an open network.
So ... created ssid alexs-portal and set things up so that when you connect to it via a web browser you get directed to the device provisioning url above. You then get prompted for a username and password .... so i created one inthe local user database and added ldb to the 3 services created from the template.
Three templates are created
.... Provisioning
..... Authorization
...... Pre-Auth
Problem is that the conditions specified in the services aren't met and the request hits another service instead. I *think* I'm supposed to hit

So what are you supposed to oo to hit this service? Is it something you set up on the controller? AFAIK I'm just sitting on an open network trying to connect to http://clearpassdev.york.ac.uk/guest/device_provisioning3.php, which it must be doing because I'm at a screen that prompts you to authenticate.
A