Self-Provisioning via SMS Authentication

Overview #

The SMS Authentication Module allows guests and users to log in to the captive portal using a one-time PIN code sent via SMS. This ensures a secure and streamlined login process without requiring passwords or prior account creation. The session duration and redirection settings can be fully configured in the Admin Portal.

1. User Login Process #

1. The user selects the Guest WiFi network.
2. They are redirected to the Captive Portal, where they enter their mobile phone number.
3. The system sends a one-time PIN code via SMS to the provided phone number.
4. The user enters the PIN code into the captive portal.
5. If the PIN is valid, the user gains access to the network.
6. Before proceeding, the user must accept the Terms and Conditions and acknowledge the Privacy Policy.
7. Upon successful authentication, the user is redirected to a predefined webpage, such as a company homepage or an event site.
8. The PIN code remains valid for five minutes. If a user disconnects and attempts to log in again within this time frame, they can use the same PIN instead of receiving a new SMS.

2. Configuration & Customization #

Administrators can configure the SMS Authentication Module through the Admin Portal with the following options:

🔹 Viewing & Managing SMS Logins #

📌 Sign In Administration → Sign In Modules → SMS Logins

• View user login history, including phone numbers, timestamps, and session durations.
• Monitor usage trends and detect unusual activity.

🔹 Configuring Captive Portal UI & Redirect Settings #

📌 Sign In Administration → Login Portal → Captive Portal Configuration → SMS Access Settings

• Customize the login page text, including instructions, branding, and user prompts.
• Modify the redirect URL where users are sent after authentication (e.g., homepage, event page, survey).
• Set session duration to determine how long users remain connected before needing to log in again.

🔹 Configuring Terms and Conditions & Privacy Policy Acceptance #

📌 Organization → Compliance → Terms and Conditions & Privacy Policy

• Define and update Terms and Conditions and Privacy Policy that users must accept before authentication.
• Ensure compliance with legal and corporate policies by enforcing acceptance before granting access.

3. Security & Compliance Considerations #

• User Consent Requirement – Users must explicitly accept the Terms and Conditions and acknowledge the Privacy Policy before authentication can proceed.
• One-Time PIN Code – Enhances security by ensuring that only users with access to the provided phone number can authenticate.
• PIN Code Validity – The issued PIN remains valid for five minutes, allowing users to reconnect without generating a new SMS.
• Session Expiry Control – Administrators can set session time limits to automatically disconnect users after a predefined duration.
• Logging & Auditing – The system records all SMS login attempts for compliance and security monitoring.

Benefits of SMS Authentication #

✔ Secure & Convenient – Users authenticate with a one-time PIN instead of passwords.
✔ Fast Login Process – No need for pre-registered accounts, making it ideal for guest access.
✔ Branding & Customization – The captive portal can be fully customized with company branding and messaging.
✔ Scalable & Flexible – Works across different industries, including hotels, events, and corporate guest networks.