Instructions on how to configure the Integration between IronWiFi and OfficeRnD
OfficeRnD’s integration with IronWiFi enables the connection between your Memberships management system (OfficeRnD) and your Radius-based Network.
Once the integration is active, you can get the following benefits:
- Unified Authentication – OfficeRnD will synchronize the users’ information in a secure way with your Radius-based network so your members will be able to log in with the same credentials they have for their mobile app & member portal.
- Enhanced Security – using separate credentials for each user reduces the risk of leaking a shared password.
- Presence tracking – record detailed member presence information – whether you bill by the hour or you want to know when your space is busier – it’s all there and automated.
- Automated day-pass usage – after members login in the Network/WiFi using any of their devices, OfficeRnD will automatically deduct from their available day passes.
As a result, your Network will be more secure, your flexible memberships & billing more automated, your members will have easier access and you will have better utilization/presence KPIs.
Known Limitations
- Access is granted to all members with access to the members portal, no matter if they are active or not. This is to be improved in the future.
- Disabling access for some user from the members portal won't kick them out of the network immediately. They just won't be let in the next time they try to log into the network.
- OfficeRnD doesn't integrate directly with any of the vendors and it works only with the vendors IronWiFi works. Please make sure your network controller is supported by IronWiFi before you move forward with this integration.
Important notice: Note that all the listed features depend on different features of your network equipment and if your network equipment doesn't support them they won't work. Please make sure those features are supported before purchasing IronWiFi:
- Authentication with OfficeRnD credentials - this feature requires RADIUS authentication and authorization and also requires configuring an external captive portal.
- Presence tracking - this feature requires your devices to send accounting data to an external RADIUS server.
Please make sure your devices support all required features before purchasing IronWiFi.
What You'll Need
Before getting started to make sure you have an IronWiFi account:
- Log in IronWifi using your account
- Navigate to Networks / Networks and create a single network
TIP: Don't have an IronWiFi account? No worries, just go to www.ironwifi.com and open a demo account to get started.
Integrate OfficeRnD with IronWiFi
- Get a new API key from the IronWiFi Console
- In IronWiFi go to Account / API Keys
- Click Create Key
- Set up the integration in OfficeRnD
- In OfficeRnD admin go to Settings / Integrations
- Activate the IronWiFi integration
- Click Configure.
- Choose the region you used in the IronWiFi console.
- Paste the API key you’ve generated
- Click Authenticate.
- Create a new network in IronWiFi
- Go to Netwokrs / Networks and click New Network
- Click on the newly created network and copy the Shared Secret (you will need it later)
- Configure your WiFi infrastructure to use IronWiFi as a RADIUS server.
- Follow the instructions on how to set up the infrastructure based on your vendor as described in the IronWiFi documentation. Here are the instructions for Cisco Meraki.
- Take the Radius server configurations from the OfficeRnD admin portal by navigating to Settings/Integrations/Iron WiFi and clicking Configure.
- Configure the IronWiFi Captive portal
- Log in your account in IronWiFi
- Navigate to Networks / Captive Portals
- Create a new captive portal entry - be careful to choose the correct network and WiFi infrastructure brand
- Click the newly created captive portal to set up its details
- Find the Authentication Providers section and expand it
- Click Add New under this section
- Fill the form
- Set the first method to REST API
- The API Endpoint is https://app.officernd.com/api/v1/organizations/<org-slug>/integrations/signin?type=ironwifi&source=portal
Replace <org-slug> with the slug available in the OfficeRnD under Settings/My Account/General. - Set the next method to POST
- Click Create to save the settings
- Test the integration:
- Log in your account in IronWiFi
- Navigate to Networks / Captive Portals
- Select the captive portal entry you created in step 4.
- Click on the Splash Page URL
- Login using your OfficeRnD Members Portral credentials
- Wait for the message you see the success message,
- Navigate to Users / Users and verify the user was created there.
Set up Automatic Checkins
In order to set up automatic checkins functionality, you need to configure the accounting data collected by your infrastructure to be sent to IronWiFi as well. This feature is called RADIUS accounting and allows you to configure where the accounting data captured from the network devices is sent. Please note that not all network gear have it and therefore enabling automatic checkins based on WiFi might not be possible with your devices.
As this configuration is done in your network devices it varies from vendor to vendor, but in a nutshell, you need to configure one more host, port and secret, so this data is also sent over.
To verify if you've set up the accounting feature correctly do the following:
- Log in the WiFi network with a new user, which has received access through the OfficeRnD integration
- Go to the Users list in the IronWiFi console (Users / Users) and verify if the user's last seen has been changed
- Go to the Accounting Data report in the IronWiFi console (Reports / Accounting Data)
- Verify if a new record for the same user appears there
If the record in the report is missing, this means the accounting data is not received in IronWiFi and you need to troubleshoot the problem. In such a case, please contact IronWiFi support for assistance.
Here are instructions how this is done in Cisco Meraki.
Source: https://help.officernd.com/hc/en-us/articles/360009622893-IronWiFi