Unless I'm misunderstanding something, it looks like using Access Manager requires users to authentication via EAP-TLS, EAP-TTLS, or EAP-TTLS/PAP, unless you need to use MAB or IPSK for things you can't install certs on.  Is there a way to configure this to use SAML auth rather than effectively using Access Manager as a cloud-based RADIUS server that syncs its user/group base to Azure?  We were expecting that this would be a solution that allows users to authenticate via browser (similar to how you'd do it at a doctor or hotel) using their Azure credentials, so there wouldn't be a need to distribute/install a cert to devices. ... View more