@baudneo I found the root problem in the authentik intregration guide. If the user is a member of multiple groups then the python code for usergroup_name does not (necessarily) return the group name...

@Vincent-TP The issue has been root caused. If the user is a member of multiple groups and a group name not configured in the omada controller is used for login then the "Temporary user is not within...

@Clive_A Thank you for your explanation. That means, the clients are on their corresponding tagged VLAN, regardless of the radius Access-Accept information. Theoretically the switch could do VLAN...

@Vincent-TP Yes, my OC300 is latest firmware version. > To verify, when did you first create this account, within a week? or more than one week? It took me almost 2 days of configuration (in...

Hello, I have a question regarding 802.1x authentication and VLAN assignment. In the OC300 documentation I read this: VLAN assignment is available to the port based authentication only. When I do...

@Vincent-TP Screenshot from Accounts -> SAML Role: Screenshot from Accounts -> SAML User: Screenshot from Accounts -> Role: The Accounts -> User page has the local Owner only.