Aruba Central

 View Only
last person joined: yesterday 

Expand all | Collapse all

ClearPass - create an authentication source using an external api

This thread has been viewed 23 times
  • 1.  ClearPass - create an authentication source using an external api

    Posted Jan 27, 2023 05:58 PM
    Hi:

    I'm new to ClearPass so forgive me if I missed an answer in the docs - I did search.

    I would like to use an api call from my ClearPass system to authenticate a user on an external system. 

    I know ClearPass has its own api interface but I need to "reach out" from ClearPass to authenticate against a separate system.

    Is this possible?  I know I can setup an Authentication source of type http but I can't make that work.

    Hopefully I am making sense here -

    Thanks -

    Mike In NM


  • 2.  RE: ClearPass - create an authentication source using an external api

    EMPLOYEE
    Posted Jan 30, 2023 05:03 AM
    The solution is specific to the external system.  You would have to be more specific.  You are making sense.

    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    HPE Design and Deploy Guides: https://community.arubanetworks.com/support/migrated-knowledge-base?attachments=&communitykey=dcc83c62-1a3a-4dd8-94dc-92968ea6fff1&pageindex=0&pagesize=12&search=&sort=most_recent&viewtype=card
    ------------------------------



  • 3.  RE: ClearPass - create an authentication source using an external api

    Posted Jan 31, 2023 05:20 PM
    I need to be able to use something like a request module to query an API on an external system so I can hand that system a cet along with the user name and one time password for an yes/no authentication response.  

    Doing this in Perl or Python would involve a simple POST request and based on the outcome of the authentication request a sting is returned for processing.

    When I go to Configuration -> Authentication -> Sources and try to add a new source I see there is a type "HTTP" but don't think that I can both do a POST from there with an attached cert then process the response.  Perhaps it isn't possible -

    Am I missing something?

    Thanks!

    Mike

        

                         
    can do requests from a regular linux system in either python or perl


  • 4.  RE: ClearPass - create an authentication source using an external api

    EMPLOYEE
    Posted Jan 31, 2023 05:58 PM
    The best place to ask is in the developer forum here:  https://community.arubanetworks.com/community-home?CommunityKey=ea467413-8db4-4c49-b5f8-1a12f193e959

    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    HPE Design and Deploy Guides: https://community.arubanetworks.com/support/migrated-knowledge-base?attachments=&communitykey=dcc83c62-1a3a-4dd8-94dc-92968ea6fff1&pageindex=0&pagesize=12&search=&sort=most_recent&viewtype=card
    ------------------------------