Hey Alemabrahao. Thanks for your reply. Unfortunate to hear Entra ID splash page does not support dynamic VLAN assignment. EAP-TLS is what we're going to run for managed devices, but we're really looking to move away from 802.1x for unmanaged devices so that's unlikely an option going forward. It's my understanding that it's one application per Entra tenant, so it looks like I won't be able to make use of multiple entra applications either. I wonder then - perhaps I can use two separate SSIDs that go back to the same Entra tenant/application, and have each SSID whitelist different allowed domains for authenticating. That all depends on how the domain whitelisting works, and if I can differentiate between parent domains and child domains. Our example would be @School.edu for employees and @students.school.edu for students (our two core userbases).
... View more