I currently have ZD1200 set up using local database which binds the user to a specific mac address when they connect so the code cannot be used multiple times. Is there a way to use Radius/AD so that the user can connect a device to the SSID using their AD credentials, then that device is bound to those credentials so they can't connect another device with the same credentials (until an admin goes into ZD and deletes that binding)?
You could set up a provisioning network and use zero IT. Users connect to the provisioning network and authenticate to either active directory or the local user database. The controller then provisions the device, disconnect the device from the provisioning network and connects it to the production network.