Your organization has Mac computers that aren’t bound to a directory. You want them to authenticate to your Wi-Fi network before users log in. Which Wi-Fi payload setting gives a user the ability to reauthenticate to the same Wi-Fi network after they login?

A "System+User" configuration creates a Wi-Fi profile that is available at both the system level and the user level. The "System" component allows the Mac to authenticate to the Wi-Fi network at the login window, before a user has logged in. The "User" component ensures the same network profile is available to the user after they log in, allowing them to reauthenticate or manage the connection within their session. This dual-mode profile provides seamless network connectivity from the pre-login to the post-login environment, directly addressing the scenario's requirements. Technically, this is often implemented using a single system-scoped profile that is configured to be available in both contexts.

B. Device Attestation: This is a security process where a device proves its identity to a network or service; it is not a Wi-Fi profile mode for different user contexts.
C. Network Relay: This refers to technologies like VPNs or proxies that route network traffic, which is unrelated to Wi-Fi authentication profiles for login states.
D. Login window: This setting enables network authentication only at the login window. While a system-level profile, this term is less precise than "System+User," which explicitly covers both pre-login and post-login usability.

1. Apple Developer Documentation

MDM Protocol Reference

"Wi-Fi Payload": The SetupModes key within the com.apple.wifi.managed payload is an array that specifies where the network is available. To meet the question's requirement

a configuration of ["Loginwindow"

"System"] would be used. The "Loginwindow" value enables pre-login authentication

and the "System" value makes it available to all users post-login. The term "System+User" is a functional description of this combined configuration.

Source: Apple Developer Documentation

com.apple.wifi.managed payload keys.

2. Apple Platform Deployment Guide (Fall 2023)

"Connect Mac to 802.1X networks": This guide explains the use of a "login window configuration profile" which is a type of device profile. It states

"A login window profile allows the Mac to connect to an 802.1X-protected network before a user logs in... Because this is a device profile

all users of the Mac use this network." This confirms that a system-level profile is available both before and after login

aligning with the "System+User" concept.

Source: Apple Platform Deployment

Page 138

"Use MDM to deploy 802.1X authenticated Wi-Fi".