WiFi WPA2 Enterprise seamless sign-on

WPA2 Enterprise setup in intune requires the on-premise domain-joined NDES server and certificate issued by internal CA. WPA2 Enterprise seamless authentication will not work if the device is not joi...

Intune

mobile device management (mdm)

rajeshkhanikar
Mar 11, 2019
Forgot to update this.
Short answer: If the computer is only joined to Azure AD, WPA2 Enterprise seamless authentication is not possible.

As of now (March 2019) it is not possible to have seamless (users are not prompted for authentication) WPA2 Enterprise authentication when the computers (Windows 10) are not joined to an on-premise AD (only joined to Azure AD). This is because winlogon credentials contains a cloud user which will not be allowed to authenticate automatically on RADIUS (radius is using the on-premise AD).

rajeshkhanikar

Brass Contributor

Mar 11, 2019

Forgot to update this.

Short answer: If the computer is only joined to Azure AD, WPA2 Enterprise seamless authentication is not possible.

As of now (March 2019) it is not possible to have seamless (users are not prompted for authentication) WPA2 Enterprise authentication when the computers (Windows 10) are not joined to an on-premise AD (only joined to Azure AD). This is because winlogon credentials contains a cloud user which will not be allowed to authenticate automatically on RADIUS (radius is using the on-premise AD).

Marius Alexander Skovli

MVP

Apr 23, 2019

Thanks for sharing with everyone. Where you able to discuss the scenarie if user is hybrid and device is cloud only? rajeshkhanikar

Forum Discussion

WiFi WPA2 Enterprise seamless sign-on

Resources