Meraki Wireless + ISE + Azure MFA

[jbenitol]

Hello Team,

Working with a customer who wants to deploy Meraki wireless authenticated with 2FA using their current Azure MFA.

I see two options and wondering if you could help clarify any caveats, limitations or alternatives. I have worked with 2FA with SAML for VPN withouth issues but cannot find the answer for Wireless deployment where there is no 2FA.

1.- Meraki -> ISE -> (RADIUS) -> NPS -> MFA.

2.- Meraki -> ISE webauth -> MFA SAML Idp.

Any ideas are welcomed.

Thanks!

[Philip D'Ath · Accepted solution]

No one uses MFA for WiFi.  Otherwise every time you roam between APs, or go out and back into coverage you would have to MFA again.

Everyone uses certificates instead.

[jbenitol]

Thanks Philip,