Implementing a dynamic, compliant guest Wi-Fi solution across a global luxury fashion group

Overview

As the Network Architect for a leading global luxury fashion conglomerate, managing a portfolio of prestigious brands, my challenge was to implement a highly customizable and brand-specific guest Wi-Fi authentication journey that also ensures global compliance with diverse data privacy regulations. With each brand having a distinct identity, it was crucial that the solution reflect those differences while maintaining security and scalability.

To achieve this, we integrated Cloudi-Fi's cloud-based captive portal with a dedicated Zscaler Internet Access (ZIA) infrastructure. This combination allowed us to authenticate and manage guest devices effectively, ensuring security, compliance, and a premium user experience.

Challenges

Tailored multi-brand experience: Operating across multiple countries with a wide range of luxury brands, we needed a solution that supports ultra-personalized authentication journeys—customized not only by country, language, and legal context but also aligned with the visual and experiential identity of each brand.

Regulatory compliance: Adhering to region-specific laws (GDPR, CCPA, LGPD, etc.) required a dynamic and location-aware consent and data handling approach.

Security and scalability: We needed a globally scalable solution that integrates with our existing SD-WAN and supports secure, centralized policy enforcement.

Solution architecture

Our implementation leveraged the strengths of both Cloudi-Fi and Zscaler ZIA:

• Ultra-customized captive portal: Cloudi-Fi enabled the creation of brand-specific portals with localized, multi-language content and flexible authentication flows (SMS, email, social login, etc.). This allowed us to deliver tailored guest experiences per brand and per country, ensuring a consistent luxury experience.
• Granular user profiling: Authentication methods feed into dynamic user categorization (guest, consultant, etc.), enabling custom security policies per user profile and brand context within Zscaler.
• Dynamic compliance management: User location and profile drive consent flows and data handling policies, helping us align with global data protection standards.

Results

Deeply personalized authentication journeys: Each brand benefits from fully customized guest login experiences, reflecting their unique tone, imagery, and customer interaction standards.

Multi-brand scalability: The architecture supports centralized management across dozens of brands and countries, enabling rapid deployment of new portals per brand/site without IT overhead.

Compliance and security: We’ve achieved high standards of security and privacy while maintaining flexibility and brand alignment across our ecosystem.

Conclusion

By integrating Cloudi-Fi with Zscaler ZIA, we've established a robust, scalable, and compliant guest Wi-Fi solution that aligns with our brands' identities and meets global regulatory requirements. This architecture not only enhances the guest experience but also fortifies our network security across all locations.