Security

Dear All,

Our customer has Aruba 7030 wi-fi controller and Forti-Authenticator.

They want to authorize wireless client endpoint on Forti-Authenticator (Captive Portal). 

Is it possible?

I din't think so, a better solutin would be to authN the users on CPPM and use the fortiauthenticator integration to share user details/roles with FA as FSSO.

Can you provide steps to implement this? I've added the fortiauthenticator as a radius accounting server, so that those details are sent to the fortiauthenticator. But I am still not seeing the users

---

@dannyjump wrote:

I din't think so, a better solutin would be to authN the users on CPPM and use the fortiauthenticator integration to share user details/roles with FA as FSSO.

---

hi ,

did you follow below links,

Yes basically its possible , because Forti-Authenticator is radius server .

What type of the authentication you are using (customer requirement , 2 factor , Social or user name and password )

as per my knowledge flow like this ,

1. on Wifi controller add Forti-authenticator as the radius server

2.in fortiauthenticator create wifi controller as the radius client

3.in aruba capative portal config redirect authentication to external server

please check these links for reference

https://community.arubanetworks.com/t5/Wireless-Access/External-Captive-Portal-Authentication/td-p/236949

https://cookbook.fortinet.com/fortiauthenticator-guest-portal-fortiwlc/

Hi Danny Jump：

May i ask a question.

If just to use captive portal authetication for my environment not use FSSO, also need use FortiAuthenticator？

Below is my architecture：

User Login-->Aruba AP or Aruba SW-->CPPM(RADIUS Accounting)-->FortiGate

Ref. CPPM TechNote - 3rd Party Enforcement Points (Fortinet) V1.1

Have a nice day.