How to configure authenticating SSID directly to AD

[BoomShakaLak]

I am looking for a guide on how to configure authentication for wireless users directly to AD on the WLC 9800.  I have found quite a few guides on setting up authentication to ISE but as we currently do not have ISE I want to set up authentication to AD moving away from PSK and then take up the discussion with management on getting ISE.

Does anyone have a decent guide they could share or provide detailed steps on how to do this?

[Karsten Iwen]

I have never done it myself, but it should be possible with Local EAP:

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/216744-configuring-catalyst-9800-wlc-with-ldap.html

Although I really don't like the MS NPS RADIUS server, I would likely prefere using that service on Windows Server instead of this local EAP method.

[BoomShakaLak]

Thanks! I will set up a test for this and report back.