Hi,
we have an SSID with more or less this configuration:
https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/201044-802-1x-authentication-with-PEAP-ISE-2-1.html
802.1X validated with an Identity Group user (Internal users)...