Security

 View Only
  • 1.  Let Users Self-Register Devices for MPSK

    Posted Jun 11, 2019 10:07 AM

    Is there a way to let users self-register devices through a portal? Can it be separate from the guest portal?



  • 2.  RE: Let Users Self-Register Devices for MPSK

    Posted Jun 11, 2019 11:46 AM
    Yes , you can provide access to the device registration form using ClearPass Guest Operator

    You will need two services :
    - Application service to authenticate guest operators
    - Mac authentication service to authenticate registered devices against the guest device repository

    Here’s the instructions to create the ClearPass Guest Operator profiles:
    https://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/Customize-Guest-Operator-Login-on-CPPM/ta-p/186192



    Thank you

    Victor Fabian

    Pardon typos sent from Mobile


  • 3.  RE: Let Users Self-Register Devices for MPSK

    Posted Jun 11, 2019 01:12 PM

    Thanks. I don't think I explained very well what I'm trying to do. We are already using the Guest Operator role to allow people to create guest accounts. 

     

    I was wondering if there is a way to have a distinct portal for people to create a guest device. Or a way to use the self service portal to allow people to authenticate and create and manage guest devices separate from guest accounts.



  • 4.  RE: Let Users Self-Register Devices for MPSK

    Posted Jun 11, 2019 01:15 PM
    Device Registration is ultimately part of Guest, but it can be fully customized with a different form configuration and theme, depending on the logged in user.


  • 5.  RE: Let Users Self-Register Devices for MPSK

    Posted Jun 11, 2019 02:18 PM

    Like tim mentioned you can customize the workflow by creating a new Operator profile and only allowing access to the device registration form

     

    In this screenshot I am using the default mac_create form but I recommend that you duplicate the default form and customize the duplicate , that way you are not making changes to the global form

    2019-06-11 14_09_46-ClearPass Cluster.png

    2019-06-11 14_08_50-ClearPass Cluster.png

    Since you already have an application service to authenticate guest operators , you will need to update it so you can assign the new operator profile