Contractor badges at a municipal data center map to Active Director…

Question

Contractor badges at a municipal data center map to Active Directory groups that should control Wi-Fi access. Which authentication approach should be selected?

Accepted Answer

WPA2/WPA3-Enterprise with 802.1X and RADIUS using directory group identity—not a contractor PSK on a sticky note — If badges already map to AD groups, use Enterprise 802.1X and RADIUS so Wi-Fi follows identity—not a sticky-note PSK for ‘all contractors.’ MACs and open SSIDs don’t read group membership.

Answer

One shared WPA2-Personal passphrase emailed to every contractor firm

Answer

Open SSID with the passphrase written on visitor lanyards

Answer

MAC allow-listing alone without user or group identity

Contractor badges at a municipal data center map to Active Directory groups that should control Wi-Fi access. Which authentication approach should be selected?

Short Explanation

Full Explanation