Hi Community,
Let me explain what is the scenario and what would be nice to achieve:
We have Meraki APs and also Cisco ISE servers for AAA.
We would like to authenticatie Wireless users with Google authentication and I know that Meraki itself offers a couple of options:
1) Splash screen with Meraki oauth authentication to a certain domain.com
2) WPA2-Enterprise with Google Authentication to a certain domain.com
What I cannot figure out is how to enforce authorization so actually to do the following
1) restrict the users allowed to access Wireless based on some Google attribute (Google groups?)
2) retrieve an attribute (Google group name?) to enforce a specific VLAN or even Meraki group in return
Solution can be either ISE only (preferred) or Meraki only
I know all this can be achieved eventually using an external RADIUS server with Google authenticator and use eventually the username provided as an attribute match in ISE (for example Email) in Active directory to retrieve in the end an AD Security group to differentiate access (IT vs Dev) but I am aiming to have a Google only solution, otherwise with AD still in the loop it would not be worth the hassle of using Google.
Thank you!
