&gt; Unlike WPA PSK, all of the real-world-usable EAP methods used in IEEE 802.1X EAPOL (&quot;WPA Enterprise&quot;) require client authentication, which must be provisioned out-of-band. Thus, effectively, they cannot be used for such deployments being discussed.<p>I&#x27;m not convinced that is really true. Sure, some sort of client authentication is technically required, but I think you can configure the authentication server to accept any authentication without compromising the link security. Or you could auto-provision users on first login or something like that depending on what sort of access you want to give.