Management
Devices
UniFi setup
Connect this client’s controller, then point Hotspot at the portal URL below.
-
Copy this client’s portal hostname (FQDN)
Always point UniFi’s captive portal at this client’s host —
https://{slug}.wifi.sostech.app(no trailing slash). Never put the guest’s final website in UniFi.https://….wifi.sostech.app -
Success / redirect URL (fixed — never changes)
In UniFi, set the success / landing / post-auth redirect field to this URL only. It never changes per client destination. Where guests go afterward is controlled in this app under Branding → After approval — redirect URL (HTTP 302).
https://….wifi.sostech.app/redirect -
External Portal Server = IPv4 (not the hostname)
UniFi rejects hostnames in the External Portal Server field. Enter the public A record IPv4 for this client’s host (DNS-only / grey-cloud so UniFi gets a real address). Portal and success paths still use the hostnames from steps 1–2.
Resolving…- Or resolve yourself:
dig +short A {slug}.wifi.sostech.app - In UniFi: Settings → Hotspot → External portal server — enter one IPv4 from above
- Or resolve yourself:
-
Hotspot → External portal
In UniFi Network: Settings → WiFi / Hotspot → Hotspot Portal (wording varies by version).
- Enable the captive / Hotspot portal for the guest WLAN
- Choose External portal server (not the built-in landing page)
- Server = IPv4 from step 3
- Captive / portal URL = exact FQDN from step 1 (no trailing slash)
- Success / landing / redirect URL (if UniFi shows a separate field) = fixed URL from step 2 (
https://{slug}.wifi.sostech.app/redirect) — never the hotel site or Google
-
Pre-authorization allowlist
Guests must reach the portal before they’re authorized.
- Allow this client’s hostname
{slug}.wifi.sostech.app(HTTPS) — prefer hostname allowlist, not only the IP - Allow DNS resolution for that host if your policy blocks DNS until authorize
- Confirm the guest SSID uses this Hotspot profile
- Allow this client’s hostname
-
Site / WLAN notes
- Use a dedicated guest WLAN (isolation / guest policy on)
- Site name is usually
defaultunless you renamed the UniFi site - Integration site id (UUID) is preferred for authorize; find it via Integrations API or Site Manager
-
Create an API key (match the host type)
Site Manager / api.ui.com connector: unifi.ui.com → Settings → API Keys — key must include this console (Network / full scopes). Direct console URL: Network → Settings → Control Plane → Integrations. A local UDM Integration key will not work on
api.ui.com. Then paste host + key below and Test connection. Site id is optional.
Guided Site Manager connect
Paste a Site Manager API key (unifi.ui.com → Settings → API Keys, Owner account). No OAuth — we list owned consoles and fill the fields below.
Portal branding
Customize the captive portal guests see when they join.
Notification emails
Guest Wi‑Fi approval requests are emailed to every address listed here.
Users
Client admins have full access. Managers can only approve/deny/block devices and edit their own login.
Your account
Update the email and password for this login.
Delete client
Soft-deletes this client. The guest portal stops working; device history is kept.