User's Manual

530 | Chromebook in Onboard Dell Networking W-ClearPass Guest 6.4 | User Guide
Directory-Based Authentication Source is Recommended
When a Chromebook user with an EAP-TLS certificate connects to the network, an authorization check is
performed to ensure that the certificate is still valid, and that the user account associated with the certificate is
still permitted to use the network.
W-ClearPass Policy Manager provides this capability for multiple authentication sources. However, at this time,
no built-in Google Apps authentication source is available.
Many Chromebook deployments will take advantage of Google Apps Directory Sync to use an existing LDAP or
Active Directory authentication source. In this environment, a W-ClearPass authentication source can be used
to verify the status of a user account when a device connects to the network.
If your deployment does not have an LDAP or Active Directory source, you can still use Onboard to provision
Chromebook devices. However, in this environment you must manually revoke the certificates of users who
are no longer authorized to access the network.
Onboard Configuration for Chromebook
The Onboard > Deployment and Provisioning > Provisioning Settings > Chromebook tab provides
Chromebook configuration settings: