Glossary
Definitions for the terms used across the Netgraph Connectivity Platform documentation.
Alphabetical reference for the terminology in this documentation.
Access Policy
Section titled “Access Policy”A per-Context ruleset that controls which Sign In Modules are offered to which audiences, along with session length, device limits, and per-module overrides. See Sign In Access Policies.
Admin Dashboard
Section titled “Admin Dashboard”The browser-based admin application you sign in to after picking an Organization. The surfaces visible to you in the Admin Dashboard are determined by your role bindings in that Organization. See Platform overview.
Administrator
Section titled “Administrator”A User with one or more role bindings in an Organization. See Administrators.
Audit Log
Section titled “Audit Log”A time-ordered record of administrative actions. Exists at Organization scope and at Context scope. See Audit Log.
Captive Portal
Section titled “Captive Portal”A web-based authentication page a guest reaches when connecting to a Sign-In-controlled guest network. See Sign In overview.
Context
Section titled “Context”A Service instance inside an Organization. Each Service (Sign In, EntryPoint, EasyPSK for Cisco Networks, Endpoint Manager for Cisco ISE) is consumed as a Context. An Organization can run many Contexts of the same type. Also referred to as a Service Context.
Context-scope
Section titled “Context-scope”An activity or role binding that applies to one specific Service Context, not to the Organization as a whole. See Users and roles.
DHCP Scope
Section titled “DHCP Scope”A range of IP addresses that a Service Gateway hands out to guest devices, plus the lease options sent with each allocation — default gateway, DNS servers, lease time, and DHCP Option 114. Configured per Sign-In Context; typically one scope per VLAN, subnet, or site. See DHCP.
EasyPSK for Cisco Networks
Section titled “EasyPSK for Cisco Networks”One of the four Services. One private Wi-Fi bubble per apartment, room, or unit on a shared SSID. An umbrella for two delivery methods: EasyPSK via RADIUS (the primary delivery, an EntryPoint Context) and Meraki WPN (Dashboard-API-based; also the in-product label). See EasyPSK for Cisco Networks overview.
EasyPSK via RADIUS
Section titled “EasyPSK via RADIUS”The RADIUS delivery of EasyPSK for Cisco Networks: the platform acts as the SSID’s RADIUS server and resolves per-unit keys at connection time, on Cisco Meraki (Identity PSK with RADIUS) and Cisco Catalyst 9800. Created and managed as an EntryPoint Context (wizard variant EntryPoint 2.0 (EasyPSK)), with three security flavours per group: Instant, Approved, and Dedicated. See EasyPSK via RADIUS.
Endpoint Manager for Cisco ISE
Section titled “Endpoint Manager for Cisco ISE”One of the four Services. Delegated, per-group administration of MAC-authorised endpoints in your own Cisco ISE. The in-product label is ISE Device Management. See Endpoint Manager overview.
EntryPoint
Section titled “EntryPoint”One of the four Services. RADIUS-as-a-Service for 802.1X, MAB, and Identity PSK. See EntryPoint overview.
Identity PSK. A wireless authentication method where each user or device has its own pre-shared key on a shared SSID.
Organization
Section titled “Organization”The customer-level container on Netgraph Connectivity Platform. Holds administrators, configuration, and every Service Context. See Organization overview.
Organization-scope
Section titled “Organization-scope”An activity or role binding that applies to the Organization as a whole — every Service Context and every Organization-level surface. See Users and roles.
RADIUS
Section titled “RADIUS”A network-authentication protocol. EntryPoint is a cloud-hosted RADIUS server; Sign In’s RADIUS Module uses RADIUS to call an external server for credential validation.
A named set of permissions, bound to a User at either Organization scope or Context scope. See Users and roles.
Security Assertion Markup Language. Used to federate sign-in with an external identity provider such as Microsoft Entra ID, Google Workspace, or Okta. See Admin Portal authentication.
Self-Service portal
Section titled “Self-Service portal”The end-user portal where people with a per-resource role in a Service Context — residents managing a Wireless Personal Network, conference hosts, ISE-group delegated administrators — sign in for that one resource. Distinct from the Admin Dashboard; different URL, different audience.
Service
Section titled “Service”Netgraph Connectivity Platform has four Services: Sign In, EntryPoint, EasyPSK for Cisco Networks, and Endpoint Manager for Cisco ISE. Each Service is consumed as a Context inside an Organization.
Sign In
Section titled “Sign In”One of the four Services. Cloud-hosted guest network with a Captive Portal and a range of sign-in methods. See Sign In overview.
Sign In Module
Section titled “Sign In Module”An authentication method available inside a Sign-In Context. Examples: Meeting Hosts, Email Self Provisioning, SAML Logins, Username & Password.
Single Sign-On. A pattern where authenticating once with an external identity provider grants access to multiple applications without re-entering credentials. On the platform, SSO is delivered through SAML. See Admin Portal authentication.
A platform-level identity. One email per platform. Can be bound to one or several Organizations with different role sets in each. See Users and roles.
Webhook
Section titled “Webhook”An HTTP callback delivered when an event occurs. Subscribable at Organization and Context scopes. See Webhooks.