Hi, im using a Routerboard RB951G with a RouterOS 7.16 version for testing purpose, evaluating the possibility of using an RB1100AHx4 with large active directory networks.
I have succesfully configured the hotspot with Radius authentication on a Windows Server 2019.
The Mikrotik portal appears and ask for domain credentials. Users can access internet with own user and password.
Now the question is : is it possible to authenticate windows domain users to access internet without inserting the credentials, making the router recognize automatically (SSO) the user logged in the windows OS ?
Thank you in advance for a possible answer.
You would still get a web browser window opening when the captive portal is detected, it may be possible to configure the browser to provide SSO credentials at this point.
For deployments with many users it is more common to use WPA2-Enterprise for WiFi and 802.1X for wired connections - there is no hotspot or captive portal, the network connection itself is authenticated against AD (or other credential store).
Isn’t 802.1x and GPO a better solution for that? (but you have to have clients connected to managed switch directly, not through some 5port dumb ones)
Hi, configuring the automatic login in the browser did the trick ! I havo not thought about it. We can put resolved to the post.Thanks a lot !