How do personal or BYOD devices get on the network?

A device needs a certificate to get on. How it gets one depends on whether you manage it.

Managed devices are easy. Anything enrolled in Intune or another MDM gets its certificate and 802.1X settings automatically. That covers school and company laptops and phones.

Users on their own iPhone, iPad, Android phone or Windows PC onboard themselves. They open a link and sign in with their Microsoft account. An iPhone or iPad installs a signed Wi-Fi profile, and an Android phone or Windows PC uses the Passbeam Connect app. Their device gets its own certificate, joins a BYOD SSID, and can go on a VLAN chosen by their Entra group. See “How do I set up BYOD so users can add their own devices?”.

Visitors and contractors belong on guest Wi-Fi. They get internet access and nothing else. See “Can Passbeam do guest Wi-Fi or a captive portal?”.

Passbeam won't let a personal device onto the network with a shared password. If someone needs real access from a device you don't manage, consider the VPN. It's the same certificate check, with a rule about who can use it.