Another solution that came up to me is using OAuth2 because it works regardless of the group membership. However, this requires the Omada Controller to (also) support OAuth2 which is not the case as...

Another solution that came up to me is using OAuth2/OIDC because it works regardless of the group membership. However, this requires the Omada Controller to support OAuth2/OIDC. Edit: I filed a...

@baudneo I found the root problem in the authentik intregration guide. If the user is a member of multiple groups then the python code for usergroup_name does not (necessarily) return the group name...

@Vincent-TP The issue has been root caused. If the user is a member of multiple groups and a group name not configured in the omada controller is used for login then the "Temporary user is not within...

@Clive_A Thank you for your explanation. That means, the clients are on their corresponding tagged VLAN, regardless of the radius Access-Accept information. Theoretically the switch could do VLAN...

@Vincent-TP Yes, my OC300 is latest firmware version. > To verify, when did you first create this account, within a week? or more than one week? It took me almost 2 days of configuration (in...