- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Importing owners to SM
Just a very quick question, can user passwords be easily imported into systems manager when you are importing new owners or do I manually need to specify these?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You can not import passwords.
You can authenticate against Active Directory ...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks, seems odd, even if I was a SMB customer with only 20 users and no AD having to set passwords manually would be a pain.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You can authenticate against other sources. For example, I have some customers authenticating against Office 365 (in fact, that is what our company does), because that is what they use for their email, and it is easy for users to use their email address and password for as many systems as possible.
You can authenticate against Google as well (I haven't done that yet). It probably supports SAML.
Their are a lot of options there ...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Blake
I have the Same Problem now. I have to import 1600 User (Owner) but do not have a AD or other Connection. It seems there is no way to import a default password with the CSV File.
I don't understand why as it is possible to set a default password for the user true the Dashboard.
We need now to set manual 1600 times a password 😞
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Maybe try to contact support or check the APIs. This is a big number of users
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Unfortunately, there is no way to automate password creation with the current product using the API or otherwise.
The original intention of the user import wasn't as a replacement for integration with identity stores such as Active Directory, where 100s or 1000s of users would be synchronized with SM. The original purpose was to solve creation of small sets of users.
That said, clearly folks in this thread are part of that group of users that do indeed want to use the user import as a way of managing 100s or 1000s of users. So, this thread has prompted us to think about how might improve this in the future. The most obvious improvement, to me at least, would not be a feature to set passwords but rather allow users to do a password reset on their own.
I can't offer up any short term fixes for this, other than offering help if indeed there as a store of user credentials in Google, AD, Azure, or some OAuth capable system.
Noah Salzman
Product Manager for Meraki SM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
But how will users be able to change their password if they come over DEP enrollment and SSP is disabled, just as an example 🙂
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
If you have that many users you really should consider putting in some kind of user management system, such as Active Directory, Office 365, etc.
You might even be able to use a cloud service for this like JumpCloud (never tried myself).
The reason it is hard is because of trying to use a feature in a way that was never intended.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
But is this still true? Haven't checked it
"iOS devices enrolling through DEP currently do not support enrolling with Azure AD, OpenID, and Google Oauth enrollment authentication. They will fall back to Meraki managed authentication and require Meraki owner accounts to authenticate if your Systems Manager network is configured with one of these methods. Note that these three methods will also not provide any group tag metadata like local Active Directory integration will."
Just in case his usecase involves DEP