Creating a User Role with Active Directory Authentication

Configuring user roles using AD authentication provides broad range of directory-based identity-related services.

1. Create a new UTP for a particular role, refer Creating a User Traffic Profile.
2. Create a role, refer Creating a User Role.
3. NOTE

   Non-proxy Auth servers are not supported.
   Create a new Proxy AD server and apply the UTP. Refer Creating Proxy AAA Servers for Standby Cluster.
4. NOTE

   In step 4 of the authentication test, for the Service Protocol option, choose Active Directory and proceed.
   Perform an authentication test to ensure that the user gets assigned the correct Role. Refer Testing AAA Servers.
5. Create a web authentication portal WLAN configuration and assign the Non-proxy AD server to it. Refer Creating a WLAN Configuration.
   1. Choose WLAN Usage > Authentication Type > Web Authentication.
   2. Configure the following for Authentication & Accounting Server:

      Web Authentication Portal: choose the option from the drop-down.

      Authentication Server: select the Use the Controller Proxy check box and choose the authentication service from the drop-down.