You would need to deploy a RADIUS proxy server (I believe NPS could do this but I have never tried), and then a RADIUS server in each AD (could be NPS). You configure the proxy to send requests for a.com to company a's RADIUS server, b.com to company b's RADIUS server, etc. Then you can configure your Meraki switches to do 802.1x, and dynamically drop users into the correct VLAN. https://documentation.meraki.com/MS/Access_Control/MS_Switch_Access_Policies_(802.1X) https://documentation.meraki.com/MS/Access_Control/Configuring_802.1X_Access_Policies_on_MS_Switches_using_Windows_2008_NPS You can also do the same thing with Meraki WiFi. You could have a single SSID, and dynamically drop users into different VLANs. You could instead dynamically push a group policy for the user which would allow you to configure lots and lots of settings for them. https://documentation.meraki.com/MR/Client_Addressing_and_Bridging/VLAN_Tagging#Per-User_VLAN_Tagging
... View more