# Juniper Mist AI Orgs NAC Portals API

**Canonical:** https://apis.io/apis/mist-ai/mist-ai-orgs-nac-portals-api/  
**Provider:** Juniper Mist AI — https://apis.io/providers/mist-ai/  
**Base URL:** https://api.mist.com/api/v1  
**Documentation:** https://www.juniper.net/documentation/us/en/software/mist/api/http/getting-started/how-to-get-started

Juniper Mist AI Orgs NAC Portals API is one of 211 APIs that [Juniper Mist AI](https://apis.io/providers/mist-ai/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. Tagged areas include Orgs NAC Portals. The published artifact set on APIs.io includes an OpenAPI specification and API documentation.

NAC Portals are for onboard Wireless and Wired client with 802.1X The NAC Portal is a web-based interface that allows users to authenticate and gain access to the network. It is typically used for guest access or for devices that do not have a pre-configured certificate for 802.1X authentication. It can also be used to provision certificates for devices that require them with the Mist Application. ### NAC-Based External Guest Portal Authorization / How to implement a External Guest Portal #### Context In the guest portal flow, context such as SSID, guest MAC, AP MAC is required to unique identify the guest, if it's already authorized (e.g. roam to another AP), and used to instruct the AP to stop redirecting/blocking the user traffic #### Redirect Guest Device (or CNA in MacOS/iOS term) will be redirected to, e.g. “?ap_mac=5c5b35001234&ssid=Guest&…” | Name | Type | Description | |------|------|-------------| | ap_mac | string | AP's MAC address | | site_id | string | Site ID | | device_mac | string | Device's MAC Address (the device that blocks the traffic) | | ssid | string | for wireless | | port_name | string | for wired (e.g. eth0, ge-0/0/13) | | client_mac | string | Client's MAC Address | #### Authorize Once the guest has gone through your portal flow, authorize them by redirect the user to ``` GET https://url_generated_by_portal_authorize_url?jwt=<signature> ``` This can be generated by ```python import jwt secret = "EIfPMOykI3lMlDdNPub2WcbqT6dNOtWwmYHAd6bY" # from portal_authorize_jwt_secret above payload = { # for wireless "ap_mac": "5c5b35001234", "wlan_id": "be22bba7-8e22-e1cf-5185-b880816fe2cf", # only for _wireless_ captive portal "client_mac": "d58f6bb4c9d8", # for wired "device_mac": "5c5b35001234", "port_name": "eth0", # only for _wired_ captive portal" "client_mac": "d58f6bb4c9d8", # common # how long should we authorize this session "minutes": 480, "expires": 1768587994, # alternatively # instead of the original URL the user is trying to go to, redirect the user to this URL "forward": "http://www.mist.com", # for testing: if authorize_only=true and authorization is successful, 200 OK will be returned instead of 302 Redirect the user to the `forward` URL "authorize_only": False } encoded_jwt = jwt.encode(payload, secret, algorithm='HS256') ```

## Machine-readable artifacts (4)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/mist-ai/refs/heads/main/openapi/mist-ai-orgs-nac-portals-api-openapi.yml
- **Documentation** — https://www.juniper.net/documentation/us/en/software/mist/api/http/getting-started/how-to-get-started
- **Documentation** — https://www.juniper.net/documentation/us/en/software/mist/api/http/api/
- **SourceCode** — https://github.com/mistsys/mist_openapi

## Other Juniper Mist AI APIs (12)

- [Juniper Mist WebSocket Streaming API](https://apis.io/apis/mist-ai/juniper-mist-websocket-streaming/)
- [Juniper Mist Webhooks API](https://apis.io/apis/mist-ai/juniper-mist-webhooks/)
- [Juniper Mist AI Admins API](https://apis.io/apis/mist-ai/mist-ai-admins-api/)
- [Juniper Mist AI Admins Login API](https://apis.io/apis/mist-ai/mist-ai-admins-login-api/)
- [Juniper Mist AI Admins Login - OAuth2 API](https://apis.io/apis/mist-ai/mist-ai-admins-login-oauth2-api/)
- [Juniper Mist AI Admins Logout API](https://apis.io/apis/mist-ai/mist-ai-admins-logout-api/)
- [Juniper Mist AI Admins Lookup API](https://apis.io/apis/mist-ai/mist-ai-admins-lookup-api/)
- [Juniper Mist AI Admins Recover Password API](https://apis.io/apis/mist-ai/mist-ai-admins-recover-password-api/)
- [Juniper Mist AI Constants Definitions API](https://apis.io/apis/mist-ai/mist-ai-constants-definitions-api/)
- [Juniper Mist AI Constants Events API](https://apis.io/apis/mist-ai/mist-ai-constants-events-api/)
- [Juniper Mist AI Constants Models API](https://apis.io/apis/mist-ai/mist-ai-constants-models-api/)
- [Juniper Mist AI Installer API](https://apis.io/apis/mist-ai/mist-ai-installer-api/)

## Tags

Orgs NAC Portals

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/mist-ai/mist-ai-orgs-nac-portals-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/mist-ai/.