Get the App
SLTechnology News&Howtos  ›  Network Security  › 

How to connect the third-party authentication platform with Web authentication?

Shulou Source: shulou.com Published: 2022-06-01 03:24:48 10月02日 Update

The Web authentication function of WSG Internet behavior Management Gateway (WFilter NGF) is very powerful, which can not only support a variety of user name authentication (local user, mailbox authentication, domain authentication, Radius authentication, etc.), but also support SMS authentication, Wechat authentication, pin authentication and other third-party authentication. However, in some cases, users also want WSG to connect to the third-party Web authentication interface, that is, to authenticate through other Web authentication systems, while WSG can control and record the Internet. In this example, I will show you how to use WSG to interface with a third-party Web authentication platform.

First of all, enable the Web authentication function of WSG.

The requirement of "Web certification" is to enable authentication for employee network segments that need to be controlled, and some computers do not enable authentication. As shown in the figure:

1. Set the IP range to be controlled

two。 Set a reasonable timeout recertification time, 1440 means that you need to recertify once a day.

3. Add the leader's mac address to the "exceptional MAC address"

Second, configure the jump of Web authentication

In "Web Authentication", click "Edit Web Authentication Page", you can edit the authentication page, through the way to achieve the Web authentication jump to the third party Web authentication URL address. As shown in the figure:

Note: the source mode cannot be saved directly. To switch to edit mode, click "Save".

Callback of Web authentication through API

After completing the authentication, the third-party authentication system also needs to call the API of WFilter to complete the authentication process.

1. Login: add_user

two。 Exit: rm_user

For API parameters, please see: http://wiki.imfirewall.com/API

Take php as an example, as shown below:

After calling, you can see the login user name in the real-time traffic graph, as shown in the figure:

Tags: Authentication third party user address such as figure function mode user name system page support login platform powerful parameter available employee multiple real-time that is Apple Docker Huawei Linux macOS MariaDB Microsoft MySQL NVidia OPPO Reno Shulou Technology Shulou Information vpn Linux Apple