Security

 View Only
  • 1.  ClearPass + "Single Sign-On" Link in SMS Receipt

    Posted Jun 15, 2021 05:05 AM
    Hi,

    our guests can log in to the guest WLAN via SMS, in the SMS we have stored the link as described in this post:
    https://community.arubanetworks.com/community-home/digestviewer/viewthread?MID=14287
    The link unfortunately does not work for all devices, on some Samsung phones the link works without problems, but from some browsers the page is blocked...
    Apple iphones with Safari do not work with and all block the link.

    Also it would be great if you could give the link an auto submit.

    Maybe someone has an idea

    thanks a lot

    ------------------------------
    Tobias
    ------------------------------


  • 2.  RE: ClearPass + "Single Sign-On" Link in SMS Receipt

    Posted Jun 17, 2021 11:23 AM
    You may try a similar approach to this question, and use JavaScript or jQuery to auto-submit. In that case, it may also be useful to take the Terms&Conditions out, as that doesn't make sense if it is auto-checked and submitted.

    You can work with your Aruba partner or TAC, as this probably can be done but it is hard to do without seeing what is happening or going wrong at this point.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 3.  RE: ClearPass + "Single Sign-On" Link in SMS Receipt

    Posted Jun 18, 2021 06:19 AM
    I've done something similar using self-sponsorship sending the self-sponsorship link in the SMS (I have lots of fun trimming the length of the message down to below 160 characters - I think I have 2 spare!)
    The problem I had with this with iPhones (tested on 14.5 and 14.6) was related to the CNA: If you move away from the CNA to click the link in the SMS the iPhone would drop the guest SSID and fallback to the 3G/4G network. Hence, I would have to have the ClearPass accessible via the internet to get the link to work.
    My solution to this was to give up on SMS and rely of self-registration with self-sponsorship using email - where the pre-sponsored guest has internet access for a grace period (eg 5 minutes) where they are instructed to gets the email sponsorship request and confirm... I also built the logic to limit a guest to only 3 attempts from this device in an 8 hour period.

    ------------------------------
    Derin Mellor
    ------------------------------



  • 4.  RE: ClearPass + "Single Sign-On" Link in SMS Receipt

    Posted Aug 28, 2021 06:33 PM

    Hi @derinmellor

    I am using this old thread to ask a question related to your last response.

    My question is related to the workflow in which we give 5 minutes of free internet access to the user post registration. User can use this 5 min period to check the confirmation email request & confirm it in order to extend the internet access to the time period that we define.

    a) Limit the number of emails that can be sent to an individual email address to x per day, where x could be some low number
    b) Limit the number of emails in total that can be sent from a single IP address/device to x per hour, where x could be some low number



    ------------------------------
    Nitesh Singla
    ------------------------------



  • 5.  RE: ClearPass + "Single Sign-On" Link in SMS Receipt

    Posted Aug 29, 2021 03:21 PM
    CPPM is not inline, it has no idea of the data being sent from the client.

    ------------------------------
    Danny Jump
    "Passionate about CPPM"
    ------------------------------