Revoke access with Microsoft Entra ID

IanEllis
IanEllis Posts: 3  Freshman Member
First Comment
in Nebula

I found yesterday the instructions on how to set up Microsoft Entra ID to authenticate users on a SSID.

We are a school and let Staff and Post16 students on our BYOD wireless and this works great for that as we configure the Entra App to authenticate those groups.

However, if I want to remove someone's access I remove them from the group but it doesn't revoke their access to the Wireless.

Rebooted several times, it never asks them to log on to Entra or just removes access.

Any idea how to do that please?

Thanks.

Accepted Solution

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,067  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    Answer ✓

    Hi @IanEllis ,

    Based on your description, we believe the issue is that although you removed account A from the Microsoft system, it can still connect to the wireless network.

    We suspect this is happening because the captive portal's lease time has not expired, allowing account A to maintain its wireless network connection. To resolve this issue, you can either shorten the lease time or wait until the current lease expires. After that, account A will no longer be able to connect to the wireless network.

All Replies

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,067  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    Answer ✓

    Hi @IanEllis ,

    Based on your description, we believe the issue is that although you removed account A from the Microsoft system, it can still connect to the wireless network.

    We suspect this is happening because the captive portal's lease time has not expired, allowing account A to maintain its wireless network connection. To resolve this issue, you can either shorten the lease time or wait until the current lease expires. After that, account A will no longer be able to connect to the wireless network.

  • IanEllis
    IanEllis Posts: 3  Freshman Member
    First Comment

    Hi,

    Thanks for the reply.

    I didn't know where the lease time was set but I then since found it.

    Site-wide —> Configure —> Site settings

    If anyone else is looking for it.

    Thanks,

    Ian.

Categories

Nebula Tips & Tricks


    Read more

    Nebula Help Center

    EnglishTiếng ViệtРусскийไทย中文（台灣）