Security

 View Only
  • 1.  CPPM - Social Login

    Posted Mar 12, 2021 07:18 AM
    Hi, I'm trying to configure social login for guest network, but I'm getting some errors.

    I did all steps to provide access to the urls necessary at the IAP.

    Google:
    User connect to the SSID -> User is redirected to the captive portal page in clearpass -> User click on "Access with google" -> User is redirected to google login -> User choose account and press login at google page -> User is redirected again to the clearpass login page
    There is no access tracker log from social login, I have only the log of the connection to the ssid and in the input, I can see the info of social login (email, type, e.g.).


    Any ideia where is the problem?
    I'm attaching the screens of clearpass and google API

    ------------------------------
    Bruno Andrade
    ------------------------------


  • 2.  RE: CPPM - Social Login

    Posted Mar 12, 2021 01:35 PM
      |   view attached
    Now getting an error message:
    Code 403 - It was not possible to access the API call.

    Somebody got this error and could resolve this?
    Any tips is welcome :-)


    ------------------------------
    Bruno Andrade
    ------------------------------



  • 3.  RE: CPPM - Social Login

    Posted Mar 13, 2021 09:03 PM
    The error message tells you exactly what to do.

    ------------------------------
    Tim C
    ------------------------------



  • 4.  RE: CPPM - Social Login

    Posted Mar 15, 2021 08:14 AM
    Hi Tim, the API is already enabled in google. I Also took an API from other customer that is working, changed the domain, urls and calls to this customer, but the error message is the same.

    ------------------------------
    Bruno Andrade
    ------------------------------



  • 5.  RE: CPPM - Social Login

    Posted Mar 16, 2021 10:00 AM
    Do you have fix the issue ?

    Because it is a google issue (not ClearPass)

    ------------------------------
    PowerArubaSW : Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP...

    PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...)

    PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)..

    ACEP / ACMX #107 / ACDX #1281
    ------------------------------



  • 6.  RE: CPPM - Social Login

    Posted Mar 16, 2021 10:55 AM
      |   view attached
    Yes.. solved it right now!

    The clearpass that I was working was on release 6.6.X. Something changed in google api that was adapted/modified/fixed in newer versions of clearpass (I guess this is why I could use google login in other clearpass that has the version 6.9).

    I had to use google aps instead google. This made possible to use Google mail to access guest network.

    Do you know if the community can contribute to ASE documents? I can write an updated social logins configurations, because all screens/permissions on providers side has changed.

    ------------------------------
    Bruno Andrade
    ------------------------------