Hi markbenson‌,

I wondered if you could help with some pointers on the Radius piece, as I'm having some issues getting true SSO to work.

Using only "authMethods=radius-auth" have a scenario where the AP's splash screen offers just the 2FA passcode to connect, then the next screen will allow username and {ldapPassword}. With another configuration on the radius side, I can provide {ldapPassword+2faPasscode} in the same string, but on the second screen only allows {ldapPassword}. Neither of these configurations work with the "windowsSSOEnabled=true" setting.

I'm struggling a little to understand whether I need "authMethods=radius-auth && sp-auth" vs changing a configuration on the Radius side to have the environment provide one single login window for users.

Is there a recommended Radius setting you would advise along with parameters to invoke in this deploy script?

Thanks!