A compliant captive portal with UniFi
Add a branded guest login to your UniFi network using the Captivo Connector agent. Controller credentials stay on your LAN — no port-forwarding required.
How the Connector model works
1. Install the Connector
Generate a UniFi Connector pairing code from the Captivo dashboard, then run the connector agent (Docker) on the same network as your UniFi controller.
2. Configure UniFi
In UniFi Dashboard → Network → Guest Policy, set the External Portal Server to your Captivo portal URL.
3. Design your portal
Pick your logo, colors and login method (SMS, voucher) from the Captivo dashboard — same experience as every other vendor.
4. Go live
When a guest connects, UniFi redirects to the portal. Captivo authenticates them and the Connector relays the MAC-authorise command to the local controller.
Why Captivo + UniFi?
- Outbound-only tunnel — controller credentials stay on LAN, no port-forwarding needed
- Compatible with UniFi Network (UDM, USG, Cloud Key) external portal flow
- SMS, voucher and hotel (room-no) login; compliant logging
- Monitor connector status in real time from the Captivo dashboard
Frequently Asked Questions
How does Captivo work with UniFi?
The Captivo Connector is a small agent (Docker container or binary) that runs on your tenant network and opens a persistent outbound tunnel to Captivo cloud. When a guest is redirected to the UniFi portal, Captivo authenticates them, then sends an 'authorise MAC' command through the tunnel to the Connector, which calls the local UniFi controller API and grants internet access. Controller credentials never leave your LAN.
Is UniFi support production-ready?
UniFi integration is available with the Connector MVP and portal flow complete. Get started by following the setup steps; email support@captivo.io if you have any questions.
Where does the Connector run?
The Connector must run on a network that can reach your UniFi controller — on the UDM Pro itself or on a separate Linux machine or Raspberry Pi as a Docker container. Only outbound TCP 443 is required; no inbound ports need to be opened.
Is this the same as the template-download model used for pfSense/OPNsense?
No. UniFi integration uses the Connector model, not the template-download model. Instead of downloading an HTML template and uploading it to the gateway, you install the Connector agent. The portal runs hosted on Captivo and the Connector acts as a secure bridge.
Add Captivo Connector to your UniFi network
Try the branded, compliant captive portal for free.