topic Re: Questions about Access Manager Integration in Cloud Networking Platform

Questions about Access Manager Integration

Aussietramp — Wed, 28 May 2025 09:30:09 GMT

Hi,

I'm currently testing Access Manager and it's looking great!

I just have a couple of questions:

Is it possible to use the same SSID to authenticate both via Entra ID and MAB (based on MAC addresses assigned to a Client-group object in Access Manager)?
Besides Entra ID, can I integrate other Identity Providers such as Google?

Thanks in advance for your support!

Mau

Re: Questions about Access Manager Integration

aleabrahao — Wed, 28 May 2025 10:07:04 GMT

Hi,

1 - Yes, it is possible to use the same SSID to support both Entra ID (formerly Azure AD) and MAB.

2- Direct integration with Google as an IdP is not natively supported in Meraki Access Manager.
You might be able to use a third-party identity broker like Okta, JumpCloud, etc.

https://documentation.meraki.com/Access_Manager/Access_Manager_Configuration_Guides/Access_Manager_non-802.1X_Supported_IoT_or_Other_Endpoints_-_MAC_Authentication_Bypass_(MAB)_and_iPSK

Re: Questions about Access Manager Integration

Aussietramp — Wed, 28 May 2025 11:45:21 GMT

This is my configuration....but when i connect to the SSID ,it asks me for username/password.Why?

This is also my SSID config:

any idea?

Re: Questions about Access Manager Integration

Ryan_Miles — Wed, 28 May 2025 12:37:00 GMT

The SSID needs to be configured for MAB and Access Manager can be the source it authenticates against. This doc covers it in great detail https://documentation.meraki.com/Access_Manager/Access_Manager_Configuration_Guides/Access_Manager_non-802.1X_Supported_IoT_or_Other_Endpoints_-_MAC_Authentication_Bypass_(MAB)_and_iPSK

Entra is the only supported IdP today. More should come in the future.

Re: Questions about Access Manager Integration

Aussietramp — Wed, 28 May 2025 12:56:15 GMT

Hi Ryan,

first of all thanks for your help.

you say that SSID needs to be configured for MAB and Access Manager but if i set up the SSID for MAB...how can i authenticate on the same SSID my users againstEntra ID?

At the moment my SSID is configured with "ENTERPRISE with ACCESS MANAGER". With this config i can authenticate my user against EntraID but not MAB.

is that correct?

Re: Questions about Access Manager Integration

Ryan_Miles — Wed, 28 May 2025 13:04:11 GMT

You will need two SSIDs: one for MAB and a second for 802.1X.

Re: Questions about Access Manager Integration

Aussietramp — Wed, 28 May 2025 13:14:45 GMT

ah ok...ive been told differentty here above but it seems like you are a meraki Employee so...well thanks for your help

Re: Questions about Access Manager Integration

Aussietramp — Wed, 28 May 2025 13:15:23 GMT

Hi,

Ryan who work for Meraki said: "You will need two SSIDs: one for MAB and a second for 802.1X."

mmm

Re: Questions about Access Manager Integration

aleabrahao — Wed, 28 May 2025 13:20:46 GMT

You had not specified that you wanted to use 802.1x.

Re: Questions about Access Manager Integration

Aussietramp — Wed, 28 May 2025 14:00:40 GMT

ah ok. Can i ask then which other authentication methods are accepted to use only one SSID with EntraID and MAB together?

Re: Questions about Access Manager Integration

Philip D'Ath — Wed, 28 May 2025 22:31:45 GMT

You can do MAB and 802.1x on a wired port. WiFi is a bit different.

Re: Questions about Access Manager Integration

nicdc01 — Fri, 06 Jun 2025 09:51:12 GMT

Where do you find the option to configure a different IdP other than Entra?
Selecting the "+Create IdP" forwards me to an Entra ID configuration page and doesn't give the option to configure anything else.

As far as I can tell the documentation remains vague about other 3rd party providers. Assuming it might be a Feature Flag you need to request them to enable?

Re: Questions about Access Manager Integration

Aussietramp — Fri, 06 Jun 2025 09:54:53 GMT

At the moment you can authenticate ONLY with Azure. Future will tell f they will add some ore identity Provider.