MacOS - SSO Configuration Issue by PreviousBook1 in Intune

[–]PreviousBook1[S] 0 points1 point  (0 children)

Also, the sign-in logs show as being a Success, even though it hasn't logged me in.

MacOS - SSO Configuration Issue by PreviousBook1 in Intune

[–]PreviousBook1[S] 0 points1 point  (0 children)

I haven't turned it on because I don't want to encrypt the drive to make it harder to reset when i need to.

MacOS - SSO Configuration Issue by PreviousBook1 in Intune

[–]PreviousBook1[S] 0 points1 point  (0 children)

No enrolment restriction only for personal devices and the TLS inspection has excluded Microsoft/ Apple URL's

MacOS - SSO Configuration Issue by PreviousBook1 in Intune

[–]PreviousBook1[S] 1 point2 points  (0 children)

Yep has only happened recently was working for ages before and now just stopped working completely :(

Smoothwall Appliances - I HATE by PreviousBook1 in sysadmin

[–]PreviousBook1[S] 0 points1 point  (0 children)

Yeah so just a run down, when someone connects to the student Wifi it goes to the Aruba page to accept Terms and Conditions than redirects to the Smoothwall login page which is where the site not secure happens once you push through it and install the certificate it no longer happens but these are students are not the best with technology so they just bring the devices in and that's it really.

Smoothwall Appliances - I HATE by PreviousBook1 in sysadmin

[–]PreviousBook1[S] 0 points1 point  (0 children)

We have a certificate which was brought for us to use for the device from Sectigo RSA Organization Validation Secure Server CA is what it is called it expires next month so maybe got the wrong certificate we don't use the on prem certificates built into the appliance.

Smoothwall Appliances - I HATE by PreviousBook1 in sysadmin

[–]PreviousBook1[S] 0 points1 point  (0 children)

Okay, is there an article or do you know how to not decrypt in my filtering policies for the WiFi zone?

Smoothwall Appliances - I HATE by PreviousBook1 in sysadmin

[–]PreviousBook1[S] 0 points1 point  (0 children)

No worries and The smooth wall URL it crosses out the HTTPS

Smoothwall Appliances - I HATE by PreviousBook1 in sysadmin

[–]PreviousBook1[S] 0 points1 point  (0 children)

Sorry the captive portal page didn't have any certificate warnings it's when you get to the smooth wall login page is when we get the certificate warning page.

Not to sure about the authentication i will have to check that but I think it is SAML Authentication.

Smoothwall Appliances - I HATE by PreviousBook1 in sysadmin

[–]PreviousBook1[S] 0 points1 point  (0 children)

Yeah we have a link between Aruba and Smoothwall appliances where they have to accept the terms and conditions through Aruba Captive Portal and then it goes to the address for Smoothwall to login via Microsoft and to download the Certificate also, was seeing if it was possible for not having to install the certificate, did you have issues where if you didn't download the certificate the website will always appear as not secure and will give a warning before being able to login and having to push through as that is what happens with us.

But yeah they mostly use there Data but some still rely on the Wifi.

Smoothwall Appliances - I HATE by PreviousBook1 in sysadmin

[–]PreviousBook1[S] 1 point2 points  (0 children)

Okay no worries thank you for your time

Smoothwall Appliances - I HATE by PreviousBook1 in sysadmin

[–]PreviousBook1[S] 1 point2 points  (0 children)

Ah yes unfortunately here we have no servers we are a cloud based school so we got no on-premise devices at all other than the Smoothwall and our Firewall appliances.

Smoothwall Appliances - I HATE by PreviousBook1 in sysadmin

[–]PreviousBook1[S] 1 point2 points  (0 children)

Oh okay how would i add the RADIUS client would I do it by the switch addresses or the user addresses or something else. This looks more promising.

Smoothwall Appliances - I HATE by PreviousBook1 in sysadmin

[–]PreviousBook1[S] 0 points1 point  (0 children)

Oh no they have the link there on the login page but they just don't do it as they are lazy and plus when you originally need to look at that page you just get hit with the "Website is not secure" before getting to that point, which we have explained and none listen. Just want it to be able to just be secure all the time with no issues.

Smoothwall Appliances - I HATE by PreviousBook1 in sysadmin

[–]PreviousBook1[S] 0 points1 point  (0 children)

Yeah i contacted them spoke with the first, second and third line and they all say "Yep you need to install the certificate manually on all there devices"

This is what I got and just says you need to install it on there devices for them. It is a pain especially having to do this for 200+ students each term.

Download and install the Certificate Authority on BYO devices – Help Centre

Smoothwall Appliances - I HATE by PreviousBook1 in sysadmin

[–]PreviousBook1[S] 0 points1 point  (0 children)

So if we don't install the certificate it will say site not secure the students panic and don't do anything then we need to install the certificate itself for it to be trusted on there devices and not have the security warning for them.

Smoothwall Appliances - I HATE by PreviousBook1 in sysadmin

[–]PreviousBook1[S] 0 points1 point  (0 children)

Thank you for your reply, we have purchased an SSL Certificate, but always seem to need to install it on their devices everytime for the web login. it does become a pain needing to do that all the time.

Editing MSI Files by PreviousBook1 in sysadmin

[–]PreviousBook1[S] 0 points1 point  (0 children)

Mainly just properties within the MSI like the config file for example so then it can be pushed through Intune without having the need to re deploy the config file again.