The secret sends an HTML request to the iOS client with a BODY element that contains only the word "Success." IOS CNA is expecting something like http://www.apple.com/library/test/success.html to return.
For example: success success
You can redirect the iOS CNA window using javascript:
<script type="text/javascript"> window.location.href = "yourdomain.com/welcome.html"; </script>
In addition, you can hide the “Success” message by changing the body text to white with the STYLE attribute in the BODY tag. The CNA iOS app doesn't seem to be looking for a page that exactly matches Apple's success.html. He seems to be looking for a BODY element containing the word "Success".
My use case
The online portal that I use requires the user to agree to the terms of service. The mobile device will detect the captured portal using CNA (Captive Network Assistant) and open a browser window at the OS level using the portal login page.
When the user clicks “Agree and Connect,” the POSTED form that authorizes its MAC address on the connected portal device.
The web server returns my own success.html with white text and javascript redirecting either to the URL requested by the user (for those cases when the user manually views the website using his mobile browser) or on the corporate welcome page.
TL DR:
User connects to inaccessible portal
Mobile device detects involuntary portal
CNA Mobile loads involuntary portal login page
The user clicks "Agree and Connect", issuing a POST request to my web server, which performs authentication
An HTTP 302 redirect is returned from a POST URL pointing to success.html on my web server that contains a javscript redirection after the BODY element . This launches the CNA iOS iOS web view to discover that it is successfully connected to the network.
CNA registration window redirects to my corporate greeting .html
The CNA web browser window automatically closes in Android, or the user can click Finish in the CNA iOS browser window to close it.
source share