Add the enrollment workflow steps

CP Word List hooks into your existing Cloudpath DPSK enrollment workflow with two steps. Both must come after the “Generate a DPSK” step — the DPSK has to exist before the service can look it up and change it. The exact values you paste (API Call URL and snippet) are shown pre-filled on the dashboard’s Cloudpath Workflow Setup section; copy them from there so they carry your Tenant ID, Shared Secret, and SSID name.

Step 1 — Send a notification

Add a Send a notification step after “Generate a DPSK”:

1. Set Display Name to something descriptive, e.g. API-word-list.

2. Check Notification Enabled.

3. Set Notification Method to Call a URL (REST API).

4. In the URL field, paste your API Call URL. It has this shape:

   https://wordlist.lanpulse.com/api/change-dpsk?enrollmentId=${GUID}&secret=<your-shared-secret>

   ${GUID} is a Cloudpath template variable that resolves to the enrollment ID at runtime. <your-shared-secret> is your tenant Shared Secret — the dashboard fills this in for you.

5. Click Save.

This step is invisible to the user. It’s what triggers the passphrase change on your controller.

Step 2 — Display a message

Add a Display a message step after the notification step:

1. Enter an HTML Title, e.g. Your Wi-Fi Password.
2. In the HTML Message field, paste the snippet shown on the dashboard. The snippet displays the new word-based passphrase and tells the user which SSID to connect to. It already contains your SSID name and Tenant ID.
3. Uncheck Show continue button and check Kill Session to close the enrollment cleanly.
4. Click Save.

Note

The snippet has a built-in 15-second timeout. If CP Word List can’t be reached, it shows the original Cloudpath passphrase instead — which is always a valid network credential. See How enrollment and fallback work.

Step 3 — Publish the workflow

Click Publish at the top of the workflow editor to make your changes live. Then enroll a test device: the display page should show a three-word passphrase like apple-red-truck.

Cloudpath template variables

These are substituted by Cloudpath at runtime:

Variable	Meaning
${GUID}	The enrollment ID for the session (e.g. Enrollment-abc123). Used in the API Call URL to identify which DPSK to change.
${DPSK}	The current DPSK for the enrollment. In the display step this is the old passphrase (already replaced on the controller), used by the snippet as a lookup key. On re-enrollment it’s already in word-list format.

If the test passphrase still shows as a random string, see Troubleshooting.