yes, hide the SSID to avoid user confusion with multiple SSID to choose from. the SSID must have a protection for standard security, like WPA2 which is compatible with all modern devices. Setup a splash screen with credentials (like Meraki authentication). This avoids users with the WPA2 password from using this network without your authorisation, and for extra peace of mind. The devices that you want to connect to this dedicated SSID should be whitelisted via Network-Wide>Clients>Add Device to avoid the splash screen. hope this clarifies it better?
... View more