Multiple SSID authentication with NPS

[mataalfredo]

Hello all,

I have a Wireless LAN controller and multiple Cisco APs with 8 SSIDs configured. Each one for the different business departments.

I want to allow Windows users to authenticate only to their specific SSID and windows group. I have a Microsoft NPS for user authentication but I dont know how to validate the SSID and the domain user at the same time.

I read in some websites about the VSA parameters, but I dont know how to configure the controller to send the SSID to my NPS and what I need to configure in my RADIUS server to validate both conditions, username and SSID.

Any help will be really appreciate.

[Augustus041701]

The set up in our office is we have Cisco AP with 8 SSID. Then the set up needed user will authenticate with Radius server NAP and Certificates based on Groupings on Active Directory. The per department access is working now. For example, Finance Staffs can connect to Finance_WIFI and so on..
My main problem is there are users that needed to access 2 or more SSID. 
For example one user from Marketing department need to access to MalaysiaIP_WIFI and IndonesiaIP_WIFI.
Is there any way it could work that way?