View Only
last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Microsoft SSPR and Clearpass

This thread has been viewed 7 times
  • 1.  Microsoft SSPR and Clearpass

    Posted May 30, 2023 01:01 PM

    Hi folks,

    Can anyone help with getting SSPR to work through Clearpass?  Currently on wireless devices we are getting the message "something went wrong".   I understand that SSPR creates a local account called "defaultuser1". Self-service password reset for Windows devices - Microsoft Entra | Microsoft Learn

    Our policy is only to allow domain accounts to authenticate.   Has anyone successfully got this to work? 


  • 2.  RE: Microsoft SSPR and Clearpass

    Posted Jun 28, 2023 05:51 AM

    What is the issue with ClearPass? Is it that you configure user authentication, and during the password reset you can't authenticate?

    How is your network authentication configured?

    With TEAP you can configure computer + user authentication, and allow access even is there is no user identity, and in that case allow just the access to perform the password reset. Or you could configure your clients to do just computer authentication with EAP-TLS (or EAP-PEAP, which is a deprecated protocol)

    Herman Robers
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.