Security

 View Only

  • 1.  Email verification in ClearPass Guest users

    Posted Jun 13, 2024 09:49 AM

    Dear team.

    As guest users register with fake email IDs, one of our clients looks at the option to provide free Wi-Fi only after ensuring that the email ID is genuine. Now the guest users are authenticating with OTP (through sms). 
     
    The approximate function as given below:
     
    - If a guest connects and register via captive portal to Wi-Fi, they will get internet access for ten minutes. 
    - Clearpass will send a verification mail to their registered email within this time 
    - If the guest opens their mail and verifies the email, they will be connected to WiFi for the next 24 hours.
    - If the guest has not verified their mail, the internet will be disconnected after ten minutes.
     
     
    If anyone has done the same solution or any other similar implementation please reply.


  • 2.  RE: Email verification in ClearPass Guest users

    Posted Jun 14, 2024 04:55 AM

    generally for guest access many orgs are just using accepts an T&Cs.

    in any case, ClearPass can validate email addresses check writeup in case you want to use email addresses.



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------

    Original Message


  • 3.  RE: Email verification in ClearPass Guest users

    Posted Jun 17, 2024 02:28 PM

    That just validates if the form of the email address looks correct. It does not verify if it is an actual email address recognized by the mail server.



    ------------------------------
    Bruce Osborne ACCP ACMP
    Liberty University

    The views expressed here are my personal views and not those of my employer
    ------------------------------

    Original Message


  • 4.  RE: Email verification in ClearPass Guest users

    Posted Jun 17, 2024 03:04 PM

    Hi

    If you do not require a sponsor confirmation you can utilize the sponsor approval funtion. Instead of sending the sponsor email to a sponsor, send it to the guest.

    If you require both sponsor approval and the guest to confirm the account, I think you can do this by adding an extra login page just for the confirmation of the guest email address.

    When "logging in", should be able to make it more or less transparent for the user, an atribute can be updated on the guest account to mark the account as verified. 



    ------------------------------
    Best Regards
    Jonas Hammarbäck
    MVP Guru 2024, ACEX, ACDX #1600, ACCX #1335, ACX-Network Security, Aruba SME, ACMP, ACSA
    Aranya AB
    If you find my answer useful, consider giving kudos and/or mark as solution
    ------------------------------

    Original Message


  • 5.  RE: Email verification in ClearPass Guest users

    Posted Jun 18, 2024 12:04 PM

    Hi Jonas, 

    No separate sponsor verification is required. Just forward the confirmation email to the guest.

    I think three roles are needed here 

    • Guest Logon role (For Captive Portal)
    • Gust role for 10 minutes internet for email confirmation 
    • Guest role after confirmation
    Middle role needs clarification on how to create and enforce a guest role with temporary internet connection for 10 minutes.

    Reg,

    Shamz


    Original Message


  • 6.  RE: Email verification in ClearPass Guest users
    Best Answer

    Posted Jun 19, 2024 04:25 AM

    I saw this guide that forwards the sponsor to the user and gives them a period of internet access to retrieve this then properly enables their account. Maybe this would work for you?

    https://support.hpe.com/hpesc/public/docDisplay?docId=sf000093912en_us&docLocale=en_US&page=index.html


    Original Message


  • 7.  RE: Email verification in ClearPass Guest users

    Posted Jun 19, 2024 06:20 PM

    Got it.. Thanks sismjw..


    Original Message


Related Content