• All Files
Aruba Central Online Help

Configuring Service Provider Metadata in Aruba ClearPass Policy Manager

This procedure describes the configuration steps required for setting up Aruba ClearPass Policy Manager as an IdP.

ClearPassClearPass is an access management system for creating and enforcing policies across a network to all devices and applications. The ClearPass integrated platform includes applications such as Policy Manager, Guest, Onboard, OnGuard, Insight, Profile, QuickConnect, and so on. must be synced to NTPNetwork Time Protocol. NTP is a protocol for synchronizing the clocks of computers over a network. along with any other SAMLSecurity Assertion Markup Language. SAML is an XML-based framework for communicating user authentication, entitlement, and attribute information. SAML enables single sign-on by allowing users to authenticate at an identity provider and then access service providers without additional authentication. SPs and IdPs. If clocks are out of sync, SAML will not function.

Before you Begin

Steps to Configure ClearPass Policy Manager as an IdP

To configure ClearPass as an IdP for providing SAML authentication and authorization services to Aruba Central, complete the following steps:

ClosedStep 1—Configuring an IdP Service

To configure an IdP service:

  1. Go to Configuration > Identity > Single Sign On.
  2. Select ClearPass Identity Provider (SAML IdP Service). The Service Templates - ClearPass Identity Provider (SAML IdP Service) page opens.
  3. Click the General tab.
  4. Enter a Name Prefix. This prefix will be used to name all of the services and enforcement policies/profiles created by the wizard.
  5. Click Next. The Authentication tab opens.
  6. Select an authentication source.
  7. Click Next. The SP Details tab opens.
  8. Click Save.
  9. Click Save.
ClosedStep 2—Configure an Enforcement Policy

To configure an enforcement policy:

  1. From Configuration > Enforcement > Enforcement Policies.
  2. Click Add to a new enforcement policy.
  3. Select the enforcement policy and click Edit.
  4. Click the Enforcement tab and click Modify to edit the default profile.
  5. In the edit enforcement profile wizard screen, click the Attributes tab.
  6. Configure the attributes as shown in the following figure:

  7. Click Save.
  8. In the Edit enforcement policies wizard screen, click the Rules tab and add the rules.

ClosedStep 3—Upload SP Metadata
  1. In the Account Home page, under Global Settings, click Single Sign On. The Single Sign On page opens.
  2. Select the SAML authorization profile configured for the ClearPass IdP service, click Show Metadata, and download the metadata.
  3. To upload SP metadata, go to Configuration > Identity > Single Sign-On (SSO).
  4. Click SAML IdP Configuration tab, and click Add SP metadata.
  5. Set the SP name as Aruba Central and select the metadata file and click Upload.

ClosedStep 4—Add Roles

To add a user role:

  1. Go to Configuration > Identity > Roles.
  2. Add the roles and click Save.

ClosedStep 5— Map Roles and Enforcement Policies
  1. Go to Configuration > Services.
  2. Select the IdP service created for Aruba Central.
  3. Click Edit.
  4. Click the Service tab.
  5. Add a service rule.

  6. Click the Authentication tab and add the authentications source.

  7. Click the Roles tab. Add a role mapping policy.

  8. Click the Enforcement tab and ensure that service name and default profile are selected.

ClosedStep 6—Add Users

To add users:

  1. Go to Configuration > Identity > User.
  2. Add users.
ClosedStep 7—SAML Authorization Profile in Aruba Central

For information on how to configure a SAML authorization profile, see Configuring SAML Authorization Profiles in Aruba Central.