Wireless Google OAuth User field showing anonymous@"domain.com" instead of login username

[logxkwan]

Hi,  When you use Meraki Desktop client : At the Network-wide -> Monitor -> Clients menu.  When select a Status = Wireless / "Windows OS" client connection to get its status, its User field shows anonymous@"domain.com" instead as the Google OAuth user ID.  Based on my observation, this is only happened to Windows OS client.  The Apple Device type (Pad/Phone/Mac computer) clients all show the correct Google user ID at the User field. Anyone has issue with this?

SSID security configured with Enterprise with Google OAuth with defined Allowed domains.

 

[alemabrahao]

I'm not sure but is it a problem related to multiple authentication factor?

@GreenMan Any insights?

[logxkwan]

Hi all,  Just want to clarify that the user can login to the Google OAuth enabled SSID. (with user has 2FA + App password setup as a prerequisite.)  The issue reported here is when Monitoring the WIFI Client which the "User" field is showing anonymous@"domain.com" instead of the right user name who is login from that computer to the Google OAuth enabled SSID.  Anyone has experience with the same issue?

[logxkwan]

Get more info from the Cisco Meraki support team.  Still the issue is working on Windows OS clients before why this is not working now.  I have put comments on my support ticket.  Waiting for Support to reply.

---

The dashboard displays "user" based on what is supplied by the client device. In the 802.1X protocol, there are two IDs inner and outer. The dashboard can see only the outer ID as the inner ID is hidden. If no outer ID is reported by the client device then the user in the dashboard shows up as "anonymous". Note that the clients with valid credentials should still be able to authenticate and the way "user" is displayed on the dashboard should not affect that.

[logxkwan · Accepted solution]

Has found the issue from internal team doing more triage. The issue as the user set up the Windows WIFI TTLS property which select the "Enable identity privacy" turn on. This will cause the user name will be shown as anonymous. This cause showing the WIFI SSID client -> user as aynonymous.