Wireless Access

Do you mean with a captive portal? 802.1x auth based on username password is not possible with Cloud IdP's.

I want WPA3-Enterprise, when I enter user/pass it can't connect but when I use Onboard and Install Network Profile it connects successfully. I just want to simply use user/pass

That is not possible with a cloud IdP. With username/password auth on WPA2/3 networks NTLM is being used. NTLM is deprecated and not available with cloud IdP's.

So the only option with Enterprise networks now is to used the Onboard app. Other option is to use the MPSK option in Cloud Auth. You will then generate a (M)PSK that is unique for an user (tied to for example Google Workspaces). But this only works with WPA2-PSK networks. 

I want WPA3-Enterprise, when I enter user/pass it can't connect but when I use Onboard and Install Network Profile it connects successfully. I just want to simply use user/pass

Do you mean with a captive portal? 802.1x auth based on username password is not possible with Cloud IdP's.

I switched to Security Level Visistor, Cloud Guest type.

I can redirect to Captive Portal after Login to SSID and authenticate on Google Account.

After successful authentication, I get the correct role that I am specifying in Identity Store of Google Workspace on Aruba Central, get the correct Access Rules, but do not get Vlan Assignment of each role and when checking in Client tab, Client Name is displayed as a series of numbers, not Email User.

One more thing, that is the problem of Add Role Assignment in WLANs configuration, I tried some properties such as Group; Group-Name but it cannot be Assigned, it only gets the default Role assigned in Identity Store of Google Workspace configured in Security > Autthentication & Policy > User Access Policy.

That is not possible with a cloud IdP. With username/password auth on WPA2/3 networks NTLM is being used. NTLM is deprecated and not available with cloud IdP's.

So the only option with Enterprise networks now is to used the Onboard app. Other option is to use the MPSK option in Cloud Auth. You will then generate a (M)PSK that is unique for an user (tied to for example Google Workspaces). But this only works with WPA2-PSK networks. 

I want WPA3-Enterprise, when I enter user/pass it can't connect but when I use Onboard and Install Network Profile it connects successfully. I just want to simply use user/pass