Self-Service portal

What residents see when they open their Wireless Personal Network in the Self-Service portal — the end-user experience that makes an EasyPSK deployment work without you.

The Self-Service portal is the residents’ side of EasyPSK. Every Self-Service User of a Wireless Personal Network gets a link to it, lands on their own unit’s detail page, and takes it from there — no further admin involvement needed for the common day-to-day actions.

Think of it as the “home router admin page” for the unit. The Group Administrator has the keys; everyone else has a read-only view of those same keys, without the management buttons. The portal is built mobile-first and follows the resident’s light or dark preference, with a manual theme toggle in the header.

The new Self-Service portal

A new Self-Service portal ships beside the classic one shown on this page. Under Organization Settings › Self-Service Portal Settings, the Default Portal setting (Classic or New) decides which one a user lands in after signing in; every user can switch between the two from the portal’s top bar at any time. Both share the same sign-in: the email link or your identity provider. The screenshots in this section show the new portal; the rest of the page shows the classic one.

Select group in the new Self-Service portal: eight groups as cards, each with its label from the Self-Service Experience (Room, Device group, Booth), its online count and its devices against the cap, and a search field — A member of several groups picks one; each card carries the group's label, its online devices and its capacity.

For a member of an EasyPSK via RADIUS group, the new portal’s group page shows:

The key card: the network name as a band, the key with Copy, and a QR code to scan. The card can be printed or downloaded from the connect guide. A QR code needs a group key, so an Approved group shows none; in a Dedicated group the device’s own key is shown when the device is registered.
Add to Apple Wallet: on an iPhone, iPad or Mac, the key goes into Apple Wallet as a pass with the network, the password, the group name, the group’s end date and the same QR code, under the logo of the default key card design. Wallet greys the pass out when the group ends; after a key change the member adds it again and the new pass replaces the old one. Groups with a shared key and a QR code only.
Devices: each with an online dot, a type icon and Last seen, a meter showing how many devices are in use of the cap, and Block / Unblock per device.
Register device: in steps, for a Wi-Fi device or, when the group takes wired devices, for a wired one by MAC address.
Invite: worded for the group’s Self-Service Experience, such as “Invite a roommate” in a Campus group or “Invite a travel companion” in a Hospitality group.
Terms first: when the Service has terms of use and a privacy notice, the member accepts them before anything else, and again when a new version is published.

The group page of Apartment 11 in the new Self-Service portal: Hi Alex, welcome to campus, the Wi-Fi network with the password and Copy, a QR code to scan, Add to Apple Wallet with a note that the pass holds the network, the password and the code, Change key, the group's devices with when they were last seen, and a Students section with Invite — A member's group page: the key, the QR code, Add to Apple Wallet, the devices and the members.

The same group page on a phone: the network name, the password with Copy, the QR code, Add to Apple Wallet and the devices stacked in one column — The same page on a phone.

Terms you have accepted in the new Self-Service portal: the terms of use and the personal data notice, each with the date accepted, the version and Read the text — Terms you have accepted: the versions the member has agreed to, and when.

A Site manager finds an entry of its own on the start page and runs their sites from there: see Sites and Site managers.

Landing

When a resident clicks the invite link they first sign into the portal. If they’re a member of more than one Context (some organisations give the same person access to a guest Sign-In Context and their apartment), they see a card picker first. Otherwise they land straight on their Wireless Personal Network detail page.

The WPN detail page

Every Wireless Personal Network detail page shows the same set of cards, gated by permission.

Self-Service portal in dark mode showing the Apartment 301 WPN detail page with How to connect and Change Passphrase expanded, a masked PSK with Show toggle, a Regenerate button, an alert that 9 connected devices will be affected, and the View Connected Devices and Manage Users cards — Group Administrator view — all four cards visible.

How to connect — visible to everyone

The card every resident sees, regardless of role. It expands into:

Step 1 — Connect to SSID: the building SSID name, displayed large.
Step 2 — Enter passphrase (PSK): the PSK, initially masked with a Show toggle. Click to copy.
View QR — a tap-to-generate QR code encoded as WIFI:T:WPA;S:<ssid>;P:<psk>;;. iOS and Android camera apps recognise the format and offer to join automatically. Great for onboarding phones without typing anything.

This one card covers the 90% case: a resident just wants their phone, laptop, or console online.

Change Passphrase — Group Administrator only

The second accordion, visible only to a member with the Group Administrator permission. It shows:

The current Pre-Shared Key masked with a reveal toggle.
A copy-to-clipboard shortcut.
A Regenerate button that rolls the PSK. Before committing, a confirmation modal tells the Group Administrator how many connected devices will have to re-join with the new key.

Rotating the key in the portal updates the Meraki Identity PSK on every associated Meraki network. Devices currently joined stay connected until they try to re-associate — at which point they prompt for the new key.

View Connected Devices — visible to everyone

A link to the device list. The Group Administrator can see every device joined to the WPN’s PSK; the other roommates can too — which is the right default for “who’s on our apartment Wi-Fi right now?”.

Self-Service portal Connected Devices on a phone in dark mode, six device cards with type, MAC address and online status, including Alex's MacBook Pro, Mia's iPad and Living-room Apple TV — Device list for Apartment 301.

Per device: a description, its type and MAC address, and whether it is online right now. Read-only — no device-level actions. The list offers two presentations: the default card view, and a table view for scanning many devices at once, switched with the view toggle above the list.

Self-Service portal Connected Devices for Apartment 301 in table view, dark theme, with columns for status, device, type and MAC address — The same device list in table view.

Manage Users (Group Administrator only)

A link to the user-management page. Only visible if the signed-in resident holds Group Administrator. Shows every Self-Service User in the WPN with their roles, and offers Add User, Update User, and Revoke actions. The Add and Update forms carry the same optional Phone number field as the admin side, so a Group Administrator can record a roommate’s contact number. A resident does not edit their own phone number here; it is set for them by a Group Administrator or an organization admin.

Self-Service portal Manage Users page for a Wireless Personal Network in dark mode with an Add User card and two residents listed — Manage Users, with Add User at the top.

Self-Service portal Add User dialog with an Email address field, an optional Phone number field labelled with a country-code example, the User (default) and Group Administrator toggles with their descriptions, and a Send email invite checkbox — The resident-side Add User form: email, an optional phone number, and the permission toggles.

Role matrix — what each permission sees

Card / action	User (default)	Group Administrator
How to connect	✓	✓
View Connected Devices	✓	✓
Change Passphrase card	—	✓
Regenerate PSK	—	✓
Manage Users card	—	✓
Add / Update / Revoke roommate	—	✓
Set a roommate’s phone number	—	✓

No per-OS setup guide

Unlike EntryPoint’s PEAP / EAP-TLS flow — which has to walk each operating system through certificate trust — EasyPSK is just a pre-shared key. There’s nothing to set up on the device beyond “enter the Wi-Fi password”, so the Self-Service portal doesn’t ship per-OS guides. The QR code handles iOS and Android onboarding; on laptops, residents copy the PSK and type it into the usual OS Wi-Fi prompt.

In an EasyPSK via RADIUS Context, a group does not have to be created by an administrator ahead of time. An onboarding rule gives a person a group of their own the first time they sign in to the portal: they sign in, the rule creates their group with a generated key in the right site, and the key is on screen at once. A printed Self-Service portal poster with a QR code leads people to the sign-in page, in a lobby, a welcome folder or at a fair. Every student on move-in day, or every exhibitor at a fair, gets their own group without a queue. See Self-service onboarding.

Identity providers behind the portal

Self-Service Users sign into the portal either via email magic-link or via the Organization’s configured identity provider. If you’ve enabled SAML 2.0 on the Self-Service Portal (Selfservice Access Control → Authentication), residents authenticate against your IdP instead of receiving token emails. See Self-Service Portal authentication.

Wireless Personal Networks

The bubble the portal acts on.

Managing Self-Service Users

Admin-side invitations and role management.