topic Re: MS365 credentials in Wireless

MS365 credentials

grcooney — Fri, 27 Oct 2017 18:07:29 GMT

Hello All,

Question... Do you all know if MS365 credentials can be an auth option for Meraki wireless?

Thanks!

-Greg

Re: MS365 credentials

Philip D'Ath — Fri, 27 Oct 2017 19:04:56 GMT

If you mean authenticating directing against AzureAD - not it can not. If you had an on premise AD environment using ADConnect to AzureAD to do directory synchronisation then you could deploy a local Network Policy Server (RADIUS) to authenticate against,

Re: MS365 credentials

grcooney — Fri, 27 Oct 2017 19:52:51 GMT

That answers it. Thank you!

Re: MS365 credentials

Philip D'Ath — Fri, 27 Oct 2017 22:06:50 GMT

If you think I helped it would be great if you could give me some Kudo's.

Re: MS365 credentials

rahulharinair — Tue, 31 Oct 2017 10:12:33 GMT

How stable is AD authentication in terms of security, we have been advised by security experts to change to AD authentication to make the WiFi network more stable. We have similar setup us you mentioned.

Re: MS365 credentials

Uberseehandel — Tue, 31 Oct 2017 15:08:58 GMT

Perhaps the simplest/cheapest way of implementing this is to set up AD Connect on a VM running a Nano Win2016 server, and linking that to Azure AD.

https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/azure-active-directory-connect

Re: MS365 credentials

Philip D'Ath — Tue, 31 Oct 2017 18:31:59 GMT

Per user authentication (such as AD Authentication) allows the user of WPA2-Enterprise mode, which generates per-user keys. It is far superior to everyone using the same pre-shared key.

Take the simple task of administration. If one person leaves, you disable their AD account and they can no longer access WiFi. If you are using a pre-shared key they can either continue to access the network, or you have to change the pre-shared key on the WiFi network and every single device that connects to it.

Re: MS365 credentials

Uberseehandel — Tue, 31 Oct 2017 18:43:04 GMT

@Uberseehandel wrote:
Perhaps the simplest/cheapest way of implementing this is to set up AD Connect on a VM running a Nano Win2016 server, and linking that to Azure AD.
~~https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/azure-active-directory-connect~~

use the link below

https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/azure-active-directory-connect

can't see what was wrong with previous link.

Re: MS365 credentials

rahulharinair — Sun, 05 Nov 2017 16:03:45 GMT

Thank you,

Re: MS365 credentials

Uberseehandel — Thu, 09 Nov 2017 09:51:11 GMT

Apparently MS has been busy - Azure MFA with RADIUS authentication

As a solution to a different problem, I am looking at using a device that has a Radius server that can be synched with Azure AD, in the new year I shall attempt to get it working with AD and see if it can be used for WiFI authentication, without digging into the API.

I also use Univention's UCS which is cost effective

Re: MS365 credentials

Johan4 — Wed, 28 Feb 2018 17:56:58 GMT

The answer is yes and I just did it, see the solution there : https://community.meraki.com/t5/Wireless-LAN/Configure-a-splash-EXCAP-with-with-sign-on-in-Azure-AD/m-p/13353#M2277