Aruba Auto Sign-On Service Template

The Aruba Auto Sign-On service template allows you to access the SAML Security Assertion Markup Language. SAML is an XML-based framework for communicating user authentication, entitlement, and attribute information. SAML enables single sign-on by allowing users to authenticate at an identity provider and then access service providers without additional authentication.-based single sign-on-enabled applications (such as Policy Manager, Guest, Onboard, and Policy Manager Insight) using a network authenticated (802.1X 802.1X is an IEEE standard for port-based network access control designed to enhance 802.11 WLAN security. 802.1X provides an authentication framework that allows a user to be authenticated by a central authority.) identity through controllers.

To access the Auto Sign-On Service service template:

1. Navigate to Configuration > Service Templates & Wizards.

2. From the Service Templates & Wizards page, select Aruba Auto Sign-On Service. The Service Templates - Auto Sign-On Service page opens to the General tab.

Figure 1  Auto Sign-On Service Template

3. Specify the Auto Sign-On service template parameters as described in the following table:

Table 1: Aruba Auto Sign-On Service Template Parameters

Parameter

Action/Description
General

Name Prefix

Enter a prefix that you want to append to services using this template.

Use this to identify services that use this service template.

Authentication

Select Authentication Source

Select an authentication source from the list.

The information provided in the Authentication, Enforcement Details, and SP details tabs are auto-populated.

Active Directory Microsoft Active Directory. The directory server that stores information about a variety of things, such as organizations, sites, systems, users, shares, and other network objects or components. It also provides authentication and authorization mechanisms, and a framework within which related services can be deployed. Name

Enter the hostname or the IP address of the Active Directory Microsoft Active Directory. The directory server that stores information about a variety of things, such as organizations, sites, systems, users, shares, and other network objects or components. It also provides authentication and authorization mechanisms, and a framework within which related services can be deployed. server.

This field is mandatory.

Description

Enter a description that helps you to identify the characteristics of this template.

This field is mandatory.

Server

Enter the hostname or the IP address of the Active Directory Microsoft Active Directory. The directory server that stores information about a variety of things, such as organizations, sites, systems, users, shares, and other network objects or components. It also provides authentication and authorization mechanisms, and a framework within which related services can be deployed. server. This field is mandatory.

Port

Enter the TCP Transmission Control Protocol. TCP is a communication protocol that defines the standards for establishing and maintaining network connection for applications to exchange data. port where the server is listening for a connection.

This value defaults to 389. This field is mandatory.

Identity

Enter the Distinguished Name (DN Distinguished Name. A series of fields in a digital certificate that, taken together, constitute the unique identity of the person or device that owns the digital certificate. Common fields in a DN include country, state, locality, organization, organizational unit, and the “common name”, which is the primary name used to identify the certificate.) of the administrator account. This field is mandatory.

Password

Enter the account password. This field is mandatory.

NETBios

Enter the server Active Directory Microsoft Active Directory. The directory server that stores information about a variety of things, such as organizations, sites, systems, users, shares, and other network objects or components. It also provides authentication and authorization mechanisms, and a framework within which related services can be deployed. domain name. This field is mandatory.

Base DN Distinguished Name. A series of fields in a digital certificate that, taken together, constitute the unique identity of the person or device that owns the digital certificate. Common fields in a DN include country, state, locality, organization, organizational unit, and the “common name”, which is the primary name used to identify the certificate.

Enter the Base DN Distinguished Name. A series of fields in a digital certificate that, taken together, constitute the unique identity of the person or device that owns the digital certificate. Common fields in a DN include country, state, locality, organization, organizational unit, and the “common name”, which is the primary name used to identify the certificate. of the administrator account. This field is mandatory.

Enforcement Details

Create new Enforcement Policy

Configure an optional enforcement policy based on the following attributes:

Department

Email

Name

Phone

UserDN

company

memberOf

Title

SP Details

SP URL Uniform Resource Locator. URL is a global address used for locating web resources on the Internet.

Enter the Service Provider (SP) URL Uniform Resource Locator. URL is a global address used for locating web resources on the Internet..

Attribute Name

Enter attribute names and assign values to those names.

These name/value pairs are included in SAML Security Assertion Markup Language. SAML is an XML-based framework for communicating user authentication, entitlement, and attribute information. SAML enables single sign-on by allowing users to authenticate at an identity provider and then access service providers without additional authentication. responses.

Attribute Value