Overview

Meter authenticates Wi-Fi users against Microsoft Entra ID through an app registration you create in the Azure portal. The registration lets Meter check a person's credentials when they connect and read their group membership through Microsoft Graph.

Prerequisites

• Administrator access to the Azure portal
• A verified domain in your Entra tenant, for example example.com

Step 1: Register the Meter NAC app

1. Sign in to the Azure portal as an administrator.
2. Go to Microsoft Entra ID → App registrations → New registration.
3. Enter a name such as Meter NAC.
4. Leave Supported account types on the default and the Redirect URI empty.
5. Click Register.
6. On the Overview page, copy the Directory (tenant) ID and the Application (client) ID.

Step 2: Create a client secret

1. Go to Certificates & secrets → Client secrets → New client secret.
2. Add a description, choose an expiry, and click Add.
3. Copy the Value. It is shown once and cannot be retrieved later.

Step 3: Grant Graph permissions

1. Go to API permissions → Add a permission → Microsoft Graph.
2. Choose Application permissions, not Delegated permissions.
3. Select User.Read.All and GroupMember.Read.All, then click Add permissions.
4. Click Grant admin consent and confirm both rows show Granted.

Step 4: Leave public client flows off

Go to Authentication → Advanced settings and confirm Allow public client flows is set to No. This is the default. Turning it on makes the registration a public client, which Conditional Access will not accept in the exclusion in step five.

Step 5: Exclude the app from Conditional Access

If a Conditional Access policy requires multi-factor authentication for your Wi-Fi users, exclude the Meter NAC app from it. Without the exclusion, their connections are rejected. Skip this step if no policy targets those users.

1. Go to Microsoft Entra ID → Security → Conditional Access → Policies.
2. Open the policy that applies to your Wi-Fi users.
3. Go to Target resources → Exclude → Select resources.
4. Select the Meter NAC app and save.

Step 6: Connect it in Dashboard

1. Log in to the Dashboard.
2. Go to NAC → Identities → IdPs.
3. Click Connect IdP and choose Microsoft Entra ID.
4. Fill in the form:
   • Domain: a verified domain in your tenant, for example example.com
   • Directory (tenant) ID: from step one
   • Application (client) ID: from step one
   • Client secret: from step two
5. Click Save.

Need help?

If you run into any issues or have questions, please reach out to our Support Engineering team by opening a ticket via the Dashboard: https://dashboard.meter.com/support