@Printen-IT Got you. If we are not using a splash page, I do not think we can do anything from the Meraki side to proactively trigger the end clients when using radius authentication as the APs will act merely as bridges in between the authentication server and supplicant.    One thing you can consider is creating a separate SSID for the phones with something like centralized web authentication with ISE or even do a sign-on splash page with AD authentication so that we can set the splash page frequency to match the credential refresh period so that the clients will re-authenticate. ... View more