Prerequisites

Cloud Authentication and Policy allows you to create user and client access policies for users and client devices from Aruba Central.

The following are the prerequisites for configuring the user access policy and client access policy:

• Ensure that you have created a device group containing at least one Aruba AP. You can onboard Aruba APs, using the Devices option in HPE GreenLake platform.

  For more information, see the Devices section in the HPE GreenLake Edge to Cloud Platform User Guide.

• For more information on how to assign APs to device groups, see Aruba Central Help Center.
• Ensure that you have configured WLAN Wireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. SSIDs Service Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. for clients. For more information about configuring client SSID, see Configuring Cloud Authentication and Policy Server in a WLAN Network.
• Ensure that you have configured user roles with appropriate access rules that are applicable for Cloud Authentication and Policy. For more information about user roles, access rules, and, configuring user roles and associated access rules, see the following topics:
  • Configuring ACLs for Deep Packet Inspection
  • Configuring User Roles for IAP Clients
• Ensure the Client Profiles and Client Tags are available in your Aruba Central account. Optionally, create custom tags in addition to the system tags for client devices. For more information about adding Tags, see Managing Tags.
  

  While configuring Client Access Policy, the client device Tags appear in the drop-down list under Client Profile Tags column of the Client Profile Tag to Client Role Mapping table.

• Ensure to obtain the external cloud identity store details. Cloud Authentication and Policy currently supports Google Workspace and Microsoft Entra ID. For more information, see Cloud Identity Store.