Thanks for the admin guide link. I couldn't see for looking when I went searching for that earlier!
OK so I have created an AAA entry for AD and pointed it to one of my DC's. I've then modified the relevant places to use it and enabled Zero-IT on my internal wlan.
First test seems OK. Browsed to the activation URL on my Android mobile, got challenged for creds, downloaded small app/installer, ran said app, clicked on the wlan name and bosh! it has connected.
Obs I have to do some more testing before roll out and we also have apple devices and windows pcs. Hopefully the activation process works across the board and isn't a resource problem on the installed devices, or an issue with some kind of injection into the device wi-fi stack causing connectivity issues elsewhere.
I just need to sort out enabling a decent tls level on the old dc os version then I think I'm good to go...?
Am I getting ahead of myself? I'd love to get a win this month! 🙂