Users

Users in IronWifi represent any entity that authenticates to your network. This includes employees, guests, contractors, and devices using MAC address authentication. Each user has credentials, attributes, and group memberships that control their network access.

User Properties

Basic Information

Field	Description
Username	Unique identifier for authentication
Full Name	User's first and last name
Email	Email address (used for certificate delivery with TLS authentication)
Organizational Unit	The unit the user belongs to (inherits group membership and attributes)

Authentication Settings

Field	Description
Authentication Source	Identity database for credential validation
Password	Clear-text password for local verification
Status	Enabled (can authenticate) or Disabled (all requests rejected)
Login Time	Time periods when authentication is allowed

Authentication Sources

• local - Verify using IronWifi's internal password database
• google - Forward requests to Google servers for verification
• rest - Use a REST API for credential verification
• LDAP - Test credentials against external AD/LDAP server

note

Google, REST, and LDAP authentication sources require a configured Connector.

Time-Based Access

The Login Time field restricts when users can authenticate:

Format examples:

• Wk2305-0855 - Weekdays 11:05 PM to 8:55 AM
• Sa,Su2305-1655 - Saturday and Sunday 11:05 PM to 4:55 PM
• Any or Al - All days

warning

All times are in UTC timezone.

Status Information

Field	Description
Creation Date	When the user account was created
Last Seen	Most recent authentication attempt

Groups

Users can be members of multiple groups and inherit attributes from them.

Adding Group Membership

1. Click Add to Group
2. Select the Group
3. Assign a Priority (1-10)
4. Click Save

Priority

Priority determines the evaluation order of group membership:

• 1 = Highest priority
• 10 = Lowest priority

Evaluation continues through all groups until a match is found (all Check Attributes match the request). When matched, group Reply attributes are added to the Response, and no further groups are checked.

Certificates

IronWifi supports certificate-based authentication using EAP-TLS protocol. Each user can have multiple certificates for different devices.

Generating a Certificate

1. Click Add Certificate
2. Select Distribution method
3. Set Validity period
4. Click Create

Distribution Options

Option	Description
Download certificate	Certificate downloads to admin's browser; import password shown in popup
Email to User	User receives email with certificate attachment and import password
Email download link	User receives email with password and one-time download link

tip

You can customize outgoing emails to match your company brand.

Attributes

Users can have check and reply attributes that control session behavior and provide control mechanisms for your NAS/controller. Additional attributes can be inherited from Organizational Units or Groups.

Adding Attributes

1. Click Add Attribute
2. Search by name or select vendor
3. Configure the attribute settings

Attribute Tables

Table	Description
check	Received value is compared to pre-defined value
reply	If check matches, this attribute is returned to NAS/Controller

Operators

Operator	Symbol	Description
Equal	=	Attribute must exactly match
Not Equal	!=	Attribute must not match
Greater Than	>	Attribute must be greater
Less Than	<	Attribute must be less
Contains	=~	Attribute contains value
Assign	:=	Assign value to attribute
Add	+=	Add to existing value

Common Attributes

Attribute	Purpose
Cleartext-Password	User's password
Session-Timeout	Maximum session duration (seconds)
Idle-Timeout	Disconnect after idle period (seconds)
Simultaneous-Use	Max concurrent sessions
WISPr-Bandwidth-Max-Down	Download bandwidth limit (bps)
WISPr-Bandwidth-Max-Up	Upload bandwidth limit (bps)

Bulk Operations

Import Users

Import users from CSV file:

1. Navigate to Users > Import
2. Upload your CSV file
3. Map columns to user fields
4. Review and confirm import

Export Users

Export user data:

1. Navigate to Users > Export
2. Select fields to include
3. Choose format (CSV, JSON)
4. Download the file