Authentication Sequence clarification

[nmarchal]

Hello,

We plan to use PA in order to provide Guest WIFI access in our Network. We need a clarification about authentication sequence feature. We plan to have two LDAP servers : the first one with only corporate users and the second one for external users. We want the captive portal to grant access to the Guest WLAN to any coporate user (with a smartphone for example) and any external user declared in the dedicated LDAP server. As far as we understand by reading the documentation, this is typically done with "Authentication Sequence". But is it possible in one authentication sequence to access sequentially the two LDAP servers? In other words, can we have two LDAP "Authentication Profiles" in the same "Authentication Sequence"?

Thank you in advance for you help.

Regards,

Nicolas

[pkruse]

In the 4.x product we have introduced the ability to support multiple authentication profiles, this allows an administrator to create an order of precedence of multiple assorted auth profiles.

You can have multiple radius, LDAP, local and Kerberos profiles and sort them in whatever order makes sense for your environment. You can use this to point to multiple LDAP servers in your case or other type, so in answer to your question yes you can have two!

~Phil

[nmarchal]

Thank you Phil for this clarification.

Regards,

Nicolas