ClearPass

Description

The ClearPass Extension connects Aruba ClearPass directly to Matrix42, enabling the automated import of ClearPass endpoints into your asset management. Endpoints are automatically matched to the corresponding computer assets and network cards based on their MAC address. Via the Self Service Portal, new endpoints can also be provisioned on demand – documented through an automatically closed Change for a complete audit log.

Installing the extension

The ClearPass Extension can be installed via the Extension Gallery.

TIP: In some cases, it may be necessary to log out and log back in after installation so that the new navigation items are displayed correctly.

Configuring the data provider

Navigate to Administration > Integration > Data Providers > ClearPass and add a new configuration. Fill in the following fields:

Daten Provider Pool: Select the on-premise worker that has access to ClearPass.

Data Provider: Select "ClearPass".

Enable Import: Activate the import of data.

Base URL: Enter the URL where ClearPass is hosted.

GrantType: Select the GrantType of the credentials used – "Client Credentials" or "Password".

ClientID: Enter the ClientID used for authentication.

ClientSecret: Enter the ClientSecret used for authentication.

Username: Enter the username (only required for GrantType "Password").

Password: Enter the password (only required for GrantType "Password").

Skip Certificate Validation: Specify whether SSL certificate validation should be skipped when establishing the connection.

Json Dll Path: Enter the full path to the System.Json.dll from Matrix42 on the worker server.

Import Endpoints: Activate the import of ClearPass endpoints into Matrix42.

Match Endpoints to Assets: Activate the automatic matching of imported endpoints to computer assets and network cards based on the MAC address.

Activate Engine Activation

The Engine Activation for the ClearPass import is included in the extension and can be activated under Administration > Services & Processes > Engine Activations. Once activated, the data provider runs automatically according to the configured schedule.

If desired, you can adjust the schedule individually in the editing dialog.

Endpoint import and asset matching

The data provider retrieves all endpoints from ClearPass and imports them into Matrix42. Depending on the configuration, matching network cards and computer assets are then linked to the imported ClearPass endpoints based on the MAC address. The matching is performed using the included import definitions.

All imported endpoints are listed under Assets > ClearPass > Endpoints. The endpoint quick view displays all additional attributes from ClearPass as well as the linked network card or assigned computer.

Enable self-service provisioning

To enable the provisioning of new endpoints via the Self Service Portal, the service must be added to a suitable service catalog.

Ordering endpoints via the Self Service Portal

Once enabled, the service can be ordered through the portal. Multiple ClearPass endpoints can be provisioned per order – either by selecting existing computers or network cards, or by entering the MAC address manually.

The MAC address and description are then transferred to ClearPass using the credentials stored in the data provider configuration. The entire process is documented in a Change that closes automatically once provisioning is complete – ensuring a complete audit log.