Roger that - we'll give it a shot and see where it goes!  Will report back for posterity.  ... View more

Not to resurrect a dead thread here but did anybody find a solution on this?  We're seeing the same behavior on our network, which is completely a Meraki stack:   - MX250 running 18.107.5 - MS225 running 15.21.1 - Meraki MR42's running 29.6.1   Endpoints are mostly Win 10/11, running Cisco Secure Client (5.1.0.136) with the Secure Endpoint and VPN Modules.  We also utilize Cisco Umbrella.   Our corporate wifi utilizes Meraki Systems Manager Sentry configuration, and this seems to be the only wifi network that exhibits the behavior.  If I connect my laptop to my Guest wifi, my Secure Client does not pop up.  When I join back to my corporate Wifi it tends to pop up, but not *always*.  Seems to be most common when I first come in during the day and have had my laptop connected at my home wifi in between.  We do have a walled garden configuration in place to allow some communications while the Sentry evaluates the end point -- things like O365 and such.  Is there something that we should maybe put in the walled garden that might eliminate this popup? ... View more

Disregard.  After playing around with this and using Chrome Developer tools I was able to determine that the following domains need to be whitelisted in our Walled Garden config for the SSID in order to permit enrollment authentication using Azure AD:   *.msauth.net *.msftauth.net *.microsoftazuread-sso.com *.microsoftonline.com *.login.microsoftonline.com *.microsoft.com ... View more

I realize this post is a bit old now but - would you (or anybody that has this working) be able to share what domains you put in your "Walled Garden" to get Azure AD Sign On working?  We're implementing a SM Sentry SSID that we want to use Azure AD sign-on to enroll our user's devices, and we get to the point in the enrollment process where the Meraki page says "Login with Azure AD" but when we click that and we're redirected to the URI's we setup in our Azure AD integration, we just get a white screen.  Right now my walled garden is permitting: *.microsoft.com *.microsoftonline.com *.live.com   If I connect to another network (or if I put a wildcard permit all in the walled garden) it works fine, but locking it down to these 3 above doesn't seem to work so I am missing *something* here. ... View more