Captive portal support

Learn about captive portals.

A captive portal is a web page that the user of a public-access Wi-Fi network should view, interact, and authenticate before access is granted to the internet. They are usually used in coffee shops, hotel lobbies, company lobbies, and other locations that have free Wi-Fi hot spots.

When an unauthenticated user connects to a Wi-Fi network (1), a captive portal re-directs all of the HTTP and HTTPS traffic to an authenticating server on the router or access-point (2). A captive portal web page is sent back to the unauthenticated client (3). After the user authenticates with his credentials successfully (4), he is granted access to the internet (5). This allows the user to access the enterprise application access (EAA) identity provider (IdP) login portal (6).

When captive portal is enabled by the administrator, the EAA Client waits till the user authenticates with the captive portal web page and connects to the internet, to reach the EAA identity provider (IdP) login portal. The EAA Client does automatic retries and does not go to the unauthorized state. This enables graceful handling of connectivity issues with minimal manual intervention. If it is not enabled, the EAA Client goes to unconnected state when the user roams through different Wi-Fi networks.

Also, if the user opens the EAA Client , the network type is set to Captive portal when captive portal web page is detected. After connecting to the internet, the network types changes to Public.