Android Radius Anonymous Outer Identity Problems with NPS

Question

We are trying to implement NPS-based Radius Identiy for our corporate WIFI. It works fine so far, except we have an issue with how Android devices are connecting for the first time. The problem is that the Android UI for connecting to WiFi with Radius includes, beside some encryption configs, usernam and password, also the field "anonymous identity".

From what I coud figure out, this anonymous identity is about the so called outer identity in the Radius auth process.

The anonymous identity is used during the outer authentication phase to prevent exposing the real username when initiating authentication.

This protects user privacy by not revealing actual credentials to potential eavesdroppers.

Login works if I use my upn in both fields, but not if I either leave anonymous identity blank or keep default "anonymous".

I stumbeled arround lots of approaches how this can be handled in NPS configuration, but none works. Actually a certain menu describes is missing.

Any idea how I can sort this issue out?

kind regards,

Dieter

Answer 1

Hello,

Thank you for posting in Q&A forum.

According to Microsoft's official documentation, to specify that user identity is masked in phase one of authentication, select Enable Identity Privacy, and in the textbox, type an anonymous identity name, or leave the textbox blank.

Reference link：https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/ff919512(v=ws.10)

I hope the information above is helpful.

Best regards

Zunhui

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.