We are migrating to Cloudflare's ZeroTrust service that includes DNS level filtering via DNS-over-Https For our Windows endpoints we are deploying the WARP client to act as the dns proxy for those. But for iOS/macOS devices, we wanted to use the OS level DNS-over-Https option. We have a test mobileconfig file that works fine, but when we deploy it via system manager the dns settings work only on wifi networks we onboarded. It seems to ignore the cellular networks and ad-hoc joined wifi networks. This isn't a problem when we have users import the mobileconfig on their own. Only when we try to deploy it via the MDM. Is this some bug that is in System Manager? or does any other suggestions for deploying/managing the setting? ... View more

We have SAML authentication configured in System Manager. Users can authenticate to Self Service Portal fine. But when enrolling iOS devices, the Meraki app defaults to the Meraki-owned account authentication. It doesn't redirect users to the SAML IDp login (as what normally happens when using Azure or Google authentication). Is this related to the app not being updated in the appstore for over a year and SAML authentication being new? ... View more

I know I can enable BitLocker via System Manager and view if the device is encrypted. Is there a way or feature available to view/access the recovery key should an IT admin require it? Something similar to the escrow keys used within System Manager for Mac FileVault? ... View more