Meraki

pematthe

Thanks for the replies. As I suspected. For info for others, we are going with the dedicated local API accounts and converting actual dashboard users to SAML/SSO I had already come up against the issue with changing the "username" attribute after converting our first user to SSO. Very useful to know.

pematthe

We are trying to transition our local account users to M365 (EntraID) SSO SAML accounts. The set up is easy enough can I cannot find clear answers to a couple of questions. I assume that it is not possible to transfer an existing user's account to SSO/SAML? As the login URL is different so it is either One or the Other or leave both accounts active? To do a full transition, the local account should be deleted - is that correct? API Keys. As per the documentation, API keys cannot be created by SAML users. What have others do for a solution to this? Have a local api-account which everyone with an existing API key now uses Do not transition these users to SSO? Get meraki to add API key support for SAML/SSO users. Any additional guidelines other than the stands documents?

pematthe · ‎Jul 16 2024

802.1x gives me two options - certs or userID. I was thinking that UserID might be simpler as the onus is on the user to log in and uses a single source - Office365/EntraID. Certs has a complicated, additional management overhead to distribute and revoke. I will take a look as the project progresses. Thanks for the advice.

pematthe · ‎Jul 12 2024

I have found that there are public RADIUS services (https://idblender.com/pricing) which can backend to O365. So that might be an option. We don't have AWS / Azure facilities as we are a non-technical events company - So that option is out. Using Meraki auth might be OK, if we could import or sync the user accounts from O365. The point is password and user tied to a single source of truth. If they leave, we only have to switch off one thing. It seems Meraki are soooo close but just missing the last piece.

pematthe · ‎Jul 12 2024

Interesting idea and seems to fit most scenarios. One issue for me is we don't use / license Intune. We are also a Apple client house. All the references are for WIN clients so not sure how this would apply for MacOS and iOS. Maybe I will test it and see what happens. Thanks for the guidance

pematthe · ‎Jul 12 2024

I am looking for a recent design guide or implementation info to convert our WPA-PSK wireless to WPA-Enterprise. Documentation I have seen says an intermediate RADIUS server is required, has this not changed yet? We have given out our PSK so many times we may have posted it on Facebook. Adding more control and linking to userID on Office365 is the objective. We are completely cloud based so do not have the infra or facilities to host a RADIUS server. What are the options? We can do SSO for Meraki dashboard login, what are the options for WPA2-Ent for the wireless connections? Our source of truth for user accounts is EntraID. I would like to link to that. Ideas?

Meraki

Community

About pematthe

pematthe

Community Record

Badges

Re: Converting Local Administrators to SSO/SAML account Administrators

Converting Local Administrators to SSO/SAML account Administrators

Re: Design or implementation Wireless Auth WPA2 enterprise with EntraID / O...

Re: Design or implementation Wireless Auth WPA2 enterprise with EntraID / O...

Re: Design or implementation Wireless Auth WPA2 enterprise with EntraID / O...

Design or implementation Wireless Auth WPA2 enterprise with EntraID / Offic...