Yes, you can do SSO with a Cloud Identity provider to the ClearPass Guest or ClearPass Guest Operator pages. Just disable the Onboard action at that point; in fact the described Onboarding is just a more advanced way of doing Cloud Identity logins.
Your Aruba partner or TAC can probably assist you in getting that configured.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------
Original Message:
Sent: Feb 24, 2022 02:42 PM
From: Ra�l Ortega
Subject: ClearPass Configuration Guide: Onboard + Cloud Identity Providers
Hi Cappalli.
can i do the same with a guest portal, not onboard?
------------------------------
Ra�l Ortega
Original Message:
Sent: Jul 10, 2017 05:52 PM
From: Tim Cappalli
Subject: ClearPass Configuration Guide: Onboard + Cloud Identity Providers
Team Aruba,
We're happy to announce an update to the ClearPass Configuration Guide for Onboard + Cloud Identity Providers. Version 2018-01 adds configuration details for Google's new Secure LDAP service for real-time authorization against Google Cloud Identity / G Suite in policy.
This configuration guide is very focused and covers:
- creating the required application in the cloud identity provider
- configuring the ClearPass SAML Service Provider and OAuth 2.0 Relying Party
- onboard provisioning settings changes required for SAML and OAuth 2.0
- customizing the ClearPass SSO dictionary
- building a SAML pre-authentication service for Onboard
- using OAuth 2.0 return attributes in a role map and/or network access policy
- Azure Active Directory, Google Cloud Identity / G Suite and Okta identity providers
- Google Secure LDAP Connector for real-time authorization
*see below for updated document link*
Feedback always welcome!
Enjoy!
- Aruba Security Team