Advice for the right Mikrotik model

Hi to all and thanks for the opportunity that was given to me having had the opportunity to subscribe to this forum.

We have several client schools that have their own wifi system (complete with a controller) with about 100 devices connected between smartphones, laptops and tablets.
We do not need to intervene on the wifi controller part which works very well, but instead we need to implement an authentication system with a captive portal of this type:

  • for the devices belonging to the internal system, there must be a mail type authentication (Server: outlook.office365.com - Port: 993 Security: TLS 3.2), that is, since each teacher must be able to authenticate with a captive portal where he enters the user name your ministerial address (such as name.surname@post.habilitation.it) and the relative password of your email address.
    This kind of authentication already existed until last year with a Mach Power device that is now out of order.

  • for guest devices there must be a social or gmail hotspot authentication, i.e. each visitor must be able to authenticate with a captive portal in which he enters his social credentials or Twitter, Facebook, Instagram or Gmail. If necessary, it may also be necessary to use a voucher system.

Which device do you recommend?
Thanks and best regards

VERY GOOD QUESTION! I hope someone will be able to answer.
The MT is not like a dell radius server etc, but it does have functionality described byUserman Manager and Hotspot that may be the path forward, again I dont know.

https://help.mikrotik.com/docs/display/ROS/User+management

https://help.mikrotik.com/docs/pages/viewpage.action?pageId=56459266

https://help.mikrotik.com/docs/display/ROS/User+Manager+and+HotSpot

I don’t think MikroTik routers are able to perform this function.
You may be able to do something with a separate RADIUS server that functions as a proxy between the hotspot authentication and the backends you want to use.
But it will be tricky…