We have a option to enable / disable validate PMKID in dot1x profile in AOS:
(Master) (config) #aaa authentication dot1x default
(Master) (802.1X Authentication Profile "default") #validate-pmkid
(Master) (802.1X Authentication Profile "default") #
It is disabled by default. This is useful for IOS devices which do not support OKC.
Can we configure this in IAP? If yes, what is the default value?
Validate PMKID is always enabled in IAP. Option to change this is NOT available in IAP.