Raf is correct. SSO feature in AirWave is to have Single Sign on to the Aruba controllers UI that AirWave monitors also SSO to AirWave Glass.
Original Message:
Sent: Jul 08, 2025 04:28 PM
From: rah322
Subject: Airwave / amp 8.3.0.4 - SSO for sign-in auth , users
Hi Ed,
SFAIK, that SSO feature is so that AMP Users can use the links provided via AMP to access the Controller's WebUI. However, don't hesitate to let me know if I'm wrong on that front.
What I think you're after is the ability to define User Groups / Roles that allow certain access to various AMP feature sets.
You should be able to do that with a RADIUS Configuration - I do it via ClearPass. It's not an SSO solution per se, more like a centralized Auth source (LDAP/AD via RADIUS).
However, you'll need to first test what privileges you can grant them - in terms of what Role options need to be enabled, per role. You can then use a specific CPPM RADIUS Auth Service to send back whatever AMP Roles you created based on whatever Auth Roles you have available to you. As a quick ... shim, if you don't have well defined AD Groups for your needs, you can create local users with whatever roles you want & you don't have to enable those users or this can be a simply flat file or DB depending on your RADIUS Server.
Otherwise, you're stuck with creating local users in AMP with whatever Roles you can create / assign.
Best of luck,
--Raf
------------------------------
Rafael Hinojosa
Original Message:
Sent: May 19, 2025 11:26 AM
From: eddie_ma
Subject: Airwave / amp 8.3.0.4 - SSO for sign-in auth , users
good day folks
looking to extend login / t-shoot functions of AMP / Airwave 8.3.0.4 for more users than just one....
there are choices for
SSO (no real 'detail' as to WHAT platforms supported though ) - we have OKTA and DUO available , prefer OKTA
and of course LDAP , but trying to not use that ActiveDirectory on-prem method.
this is for enabling various internal tech support to use Radius Auth info (rejects) , Clarity , Clients and Switch t-shooting
..and , no, we aren't moving (yet) to Aruba Central ....
thnx for any feedback, links
Ed