Wireless 802.1x with minimum auth infrastructure on MR

[RichardChen1]

Current state: MR33 with psk. All corp computers are enrolled with Microsoft Intune with SCEP.

New requirement: How can we make this so that staff can move around the offices freely and not have to remember or enter a password for a registered device?

Questions: 

- Can Meraki talk to Intune directly? I can't find any info, mostly likely not?

- Radius server is a must?

- Is "Trusted acess" a solution that can scale not only on mobile but also windows computers?

Any suggestion is appreciated.

Thanks in advance.

[PhilipDAth · Accepted solution]

Microsoft makes this quite a complicated setup.

You have to must have an on-premise certificate server, and have Intune issue certificates from that using NDES.  You then need an on-premise NPS server, and you perform authentication against that using RADIUS.

A RADIUS server is a must.

Trusted Access does not support Windows to the best of my knowledge.

[RichardChen1]

I thought so. Thanks for your feedback. 

[ITzhak]

Hi Richard,

Did you get this working? 
I'm trying to do this with Jamf as the MDM to connect to the Meraki Wireless using Microsoft SCEP