---
title: Single Connect GUI Configuration
slug: singleconnect-reference-guide-3-1-0/single-connect-gui-configuration
description: Learn how to configure your Single Connect GUI with this comprehensive guide. From creating user groups and device groups to defining authenticator secret keys, this document covers it all. Discover instructions on configuring RADIUS 802.1x, enabling dyna
docTags: 
createdAt: 2022-08-01T11:54:22.000Z
---

Configurations in the Single Connect GUI are required as well:

1. Create users and user groups. (See sections [Manual User Creation](docId\:LRiPjDnXQ5g30bfJOMrJ8) and [User Group Creation](docId\:CqJW9kmGk4tJ4f2zIIMiA))
2. Create device groups and add new devices to device groups. (See sections  [Creating User Groups](docId\:o8hZ2WtSCs9ykOcFa0W1t) and [Adding Devices Manually](docId\:Dhv5DvYCMfJYmAZ4uY2Hk))
3. Create device group realms with the user groups and device groups defined in the previous steps (See section [Creating Device Group Realms](docId\:hrDZKllxbj3LJnE9FVBir))

:::hint{type="info"}
The devices added in step 2 must correspond to the last destination IP that sends an authentication request to Single Connect. For example, Wireless LAN Controller, Firewall etc.
:::

1. Define the authenticator secret key as **globalSecretKey **on the device group properties. (See section [Device Groups Properties](docId\:bjl-a-S0o5hOvDJhpRd-g))
2. Navigate to **Administration**> **RADIUS 802.1x Config**.
3. Choose an **EAP Typ**e (only PEAP is currently available)
4. Fill in the fields **Certificate Authority PEM**, **Certificate Private Key PEM** (which includes certificate and private key), and **Certificate Private Key Password**.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/AU-cShign4n4DG85-qR0d_image.png "802.1x Configuration")

- If Dynamic VLAN and MAC filtering are to be activated, the box(es) should be checked. (See section [MAC Filtering Configuration](docId\:pBIxysQ_NjonqBHqc2s_g))

:::hint{type="info"}
VLANs can be dynamically assigned by a RADIUS server to applicants requesting 802.1X authentication through that server. If dynamic VLAN is assigned to applicants, the following 2 settings must be set in Single Connect:

1. Check the dynamic VLAN box in the 802.1x config screen
2. The RADIUS Attribute Policy should be defined on the related user group as VLAN interval. See section [Adding RADIUS/TACACS+ Attributes](docId\:ViYJ4nCXAug0EGtxHK432).
:::

- Check the **Add Single Connect Server to Active Directory** box and fill in the required fields:



::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/67Mbuzggxud7XjsapNi8K_image.png" size="74" width="699" height="341" caption="802.1x Active Directory Configuration" position="center" showCaption="true"}