WPA2 Enterprise - Client authentication

[peddy76]

Hi all,

we have implemented a new site with Cisco Meraki but we have a problem with a SSID that is using the '802.1X with custom RADIUS  '. With other sites we don't have any problem, but in this specific the transparent authentication doesn't work. The clients are in a different AD Domain compared to the other sites.

Is there a way to force the client to ask for authentication instead of using the single sing on?

Many thanks,

Maurizio

[PhilipDAth]

If the clients are in a different AD you need to export your CA root public certificate.  Then create a group policy in the AD that the clients belong to and add your CA public certificate to their trusted root authority certificate list.