Extreme Networks ExtremeCloud Appliance Series - Page 158

Authentication with Third-party Credentials
Guest Registration using a third-party application has the following advantages:
•
It provides ExtremeCloud Appliance with a higher level of user information by obtaining information
from the end user's third-party application account instead of relying on information entered by the
end-user.
•
It provides an easier registration process for the end user. ExtremeCloud Appliance retrieves the
public information from the end user's third-party account and uses that information to populate the
name and email registration fields.
Once you have configured a third-party application for registration, this is how the authentication
process works:
•
The end user attempts to access an external Web site. Their HTTP trac is redirected to the captive
portal.
•
In the Guest Registration Portal, the end user selects the option to register using credentials from a
third-party (Facebook, Yahoo, etc.)
•
The end user is redirected to the third-party login screen.
•
If an Acceptable Use Policy option is configured, the captive portal verifies that the AUP has been
acknowledged before redirecting the user to the third-party application.
•
Once logged in, the end user is presented with the information that ExtremeCloud Appliance
receives from the third-party application.
•
The end user grants ExtremeCloud Appliance access to the third-party information and is redirected
back to the captive portal where they see a "Registration in Progress" message.
•
The third-party application provides the requested information to ExtremeCloud Appliance, which
uses it to populate the user registration fields.
•
The registration process completes and network access is granted.
Third-party Registration Requirements
Third-party captive portal registration requires the following:
•
The ExtremeCloud Appliance Access Control engine must have Internet access in order to retrieve
user information from the third-party application.
•
The ExtremeCloud Appliance Access Control Unregistered access policy must allow access to the
third-party application site (either allow all SSL or make allowances for application servers).
•
The ExtremeCloud Appliance Access Control Unregistered access policy must allow access to HTTPS
trac to the third-party application OpenID servers.
•
A Unique third-party application must be created on the third-party application Developers page.
•
The Portal Configuration must have the third-party application enabled and include the third-party
application Application ID and Secret.
Onboard
ExtremeCloud Appliance User Guide for version 4.36.03 158