---
title: Single Connect GUI Configuration
slug: reference-guide-3-0-0/single-connect-gui-configuration
description: Learn how to configure the Single Connect GUI with this comprehensive guide. Follow step-by-step instructions for creating users, user groups, device groups, and adding devices. Discover how to set up device group realms and define the authenticator secre
docTags: 
createdAt: 2022-08-01T11:54:22.000Z
---

Configurations in the Single Connect GUI are required as well:

1. Create users and user groups. (See sections [Manual User Creation](docId\:mClwU52Xvzwcvx1u_g0C7)  and  [User Group Creation](docId:_8e2JBCTFdgt6-kuBePUT)   )
2. Create device groups and add new devices to device groups. (See sections [Creating Device Group Realms](docId\:B6BqXl4KuURptVCiyENrn)  and [Adding Devices Manually](docId:85RfH6qvfMGy6UzB4U6jR))
3. Create device group realms with the user groups and device groups defined in the previous steps (See section  [Creating Device Group Realms](docId\:B6BqXl4KuURptVCiyENrn))

:::hint{type="info"}
The devices added in step 2 must correspond to the last destination IP that sends an authentication request to Single Connect. For example, Wireless LAN Controller, Firewall etc.
:::

- Define the authenticator secret key as **globalSecretKey** on the device group properties. (See section [Device Groups Properties](docId\:U58LWU6CKOaXJ9-VKaVDW) )

1. Navigate to **Administration**> **RADIUS 802.1x Config**.
2. Choose an **EAP Typ**e (only PEAP is currently available)
3. Fill in the fields “**Certificate Authority PEM**”, “**Certificate Private Key PEM**” (which includes certificate and private key), and “**Certificate Private Key Password**”.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/AU-cShign4n4DG85-qR0d_image.png" size="80" width="808" height="449" caption="802.1x Configuration" position="center" showCaption="true"}

- If Dynamic VLAN and MAC filtering are to be activated, the box(es) should be checked. (See section [MAC Filtering Configuration](docId\:arrBsWofyURnG2FOFttES)) VLANs can be dynamically assigned by a RADIUS server to applicants requesting 802.1X authentication through that server. If dynamic VLAN is assigned to applicants, the following 2 settings must be set in Single Connect:

:::hint{type="info"}
1. Check the dynamic VLAN box in the 802.1x config screen
2. The RADIUS Attribute Policy should be defined on the related user group as VLAN interval. See section [Adding RADIUS/TACACS+ Attributes](docId\:aWueDduW8Ogn4CL2KngSq).
:::

- Check the **Add Single Connect Server to Active Directory** box and fill in the required fields:



::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/67Mbuzggxud7XjsapNi8K_image.png" size="80" width="699" height="341" caption="802.1x Active Directory Configuration" position="center" showCaption="true"}