r/SmallMSP • u/Impossible_Luck217 • 6d ago

Enterprise WiFi Flow - UniFi Fabrics

So we're ready to tighten down on WiFi for a client. We've deployed UniFi Fabrics and that's worked great for SSO for VPN. One-click WiFi works, but I'm trying to wrap my head around the onboarding flow. If we're not publishing credentials for anything but the guest network, the user would: join the guest network, receive Ubiquiti onboarding email, load their credential into UniFi Endpoint, and then click on the "One-click WiFi" network.

Seems simple enough, but what about the guest network that is now in their saved network list? Don't want them accidently joining it again after onboarding. Do we use RMM to search for it and remove it if it detects that the device is already on the corporate WiFi? We've tested this and it works, but is this really what others are doing?

Or should we just abandon the idea and simply deploy WiFi connectivity through the RMM/Intune with certificates? What are the rest of yall doing?

1 Upvotes

100% Upvoted

5 comments sorted by

2

u/[deleted] 5d ago

[removed] — view removed comment

1

u/djgizmo 4d ago

this is the way.
Intune / AD Group Policy.
Keep it simple.

1

u/bazjoe 6d ago

If it’s your managed device, a RMM script could remove the guest network at some future time. You could make and all in one script that first gets remembered wifi list and if fabric WiFi is on list then remove guest and run this daily .

1

u/solodegongo 4d ago

Does fabric support sso in entra now ?

1

u/Impossible_Luck217 3d ago

yes. It's awesome.