On our spotipo website, create a site. Make sure that the router type is set to "Cisco WLC"
​

Once you have created your Site, go to Settings -> WLC and create a new WLC Network by clicking the Add button.

Once the Site is created, your new network will contain some important data, that you will need later on in the configuration, so make sure to remember this part.

On your WLC GUI, go to Configuration -> Secruity -> AAA -> Servere/Groups -> RADIUS. Add a new Radius server and configure it like pictured below.

Name: Spotipo-Radius

Server Address: 34.77.150.10

Leave the Auth and Acct port at 1812 and 1813 which are default values.

To find the Key, find the RADIUS SECRET listed on the Spotipo website, and copy it in the key field.

If you want to add the backup server, do the same steps as before, simply use the Server Address 35.205.248.64 . For Key, use the same RADIUS Secret as before.

Once you've configured RADIUS servers, go to AAA Method list

Create a new Authentication method list called spotipo_local_auth. Make sure That the Type is login and the Group type is set to local.

Also, make sure that your Radius Server Group is assigned to this method list.

Next, go to Authorization, and repeat the same steps. Make sure the type is network and Group Type is local

Also, create a default Accounting Method list called default. Make sure type is network.

Go to Configuration ->Security -> WebAuth. First select the global parameter. Make sure that Virtual IPv4 Address is set. It doesn't have to be a specific address. 192.0.2.1 is the default.

For Trustpoint, make sure you have a valid SSL certificate set. If you use a self signed certificate, users will get prompted with the unsafe message while trying to authenticate.

Also, make sure to have Web Auth intercept HTTPs and Enable HTTP server for Web Auth turned on.

After you've configured global webauth, create a new parameter. Call it spotipo_webauth (or anything you'd like).

Make sure that the type is set to webauth and disable Success and Logout Window as well as Cisco Logo.

Go to Advanced tab. Make sure to use URL provided on the Spotipo website under Splash URL. And use that under Redirect URL for login.

Configure the rest like pictured below. Make sure that the portal IPV4 Address is set to 107.178.247.148 as that is the IP address of app.spotipo.com

Go to Configuration -> Tags & Profiles -> WLANs If you've already created a WLAN, open it. If not, create one by pressing the Add button.

Under Security, make sure that the Layer 2 security is set to none.

Under Layer 3. Make sure that the Web Policy is turned on. Set the Web Auth Parameter Map to the one we created previously (Spotipo_Webauth).

Also, make sure that the Authentication list is set to the spotipo_local_auth that we've created earlier.