I'm currently trying out Meraki Access manager in conjunction with Entra ID to try and use Entra groups and users to manage access for WiFi (and eventually hopefully switch based access) Couple issues I've found that I wanted to see if anyone had a work around for or had any information on if and when these things may be supported: We use conditional access and require MFA when logging in from outside of certain IPs. When trying to connect to an SSID that is using Meraki Access Manager, the log in attempt comes from San Francisco CA and the IP changes often. Connection to the SSID fails because MFA requirements weren't met (no window, splash page etc. pops up it just doesn't let you connect). Has anyone seen or know of a set of public IPs that Meraki Access Manager would be authenticating from? We spoke to support and they don't currently have a list of IP's available. Will this eventually be published? Any clue if MFA modern authentication prompts, splash page for MFA or anything along those lines is going to be supported or is in the works? Based on the logs it fails because MFA can't be done and is required to authenticate. I know that we could exclude Meraki Access manager from MFA requirements completely, but this leaves a pretty big security hole, especially if we can't lock that bypass down to a specific set of Meraki IPs. Anybody come across this issue and find any secure ways of making this work at this point? I am really looking forward to using this feature once it comes out of beta but cannot really use it the way it is set up currently.
... View more
