Ok we can use other ways of user auditing instead then but now how would I get mobile devices (iPhone and iPads) to adopt the cert authentication through the meraki SSIDs. They still seem to prompt for a User/Pass after I have setup the NPS server, set the Radius in Meraki and the CA is working as this solution works just fine on test laptops.    This solution works for out Windows devices but I have read Meraki's solution for the mobile devices and cert auth is as such here: https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Certificate-based_Wi-Fi_authentication_with_Systems_Manager_and_Meraki_APs    That will change the Radius server to Meraki Authentication so then that screws up the solution for the laptops.  ... View more

Thank you I will test with those settings in Meraki. Just in the first few tests I do notice that the logs containing the Success and deny logs show the Computer/user as anonymous. Seeing is how the Policy is looking for a Machine cert that makes somewhat sense but I don't suppose there is a way to audit the user as well in the logs?  ... View more

Correct which I have. My issue is related to Meraki though and the configuration of the SSID access. So to get it to work I had to pick the radio button currently selected: This will not encrypt any connections which is the problem here. ... View more

Maybe I wasn't clear enough but we have user/pass already working with our External SSO IDPs. I already have NPS and the CA configured and done and it works in a test network on the SSID I'm using. The problem is the selection of encryption methods with a Certificate based authentication is set to "OPEN" which I do not want.  ... View more

If you mean the address spaces  in the S2S local address ranges for the meraki side, yes. I included the main default vlan space and the anyconnect subnet as well. ... View more