Need to find a secure way to allow Linux and MacOS laptops wireless access to internal networks. We need a way to validate both the user and machine before allowing access to the internal networsk (each business unit has a unique subnet). Best if the business unit network admins are able to provision machines that can joint their internal networks. Does not have to be the same solution for all OS's but that will be preferable. Do not want to use JUST MAC authentication (too easly spoofed). We don't have any MDM solution in place. We are doing domain authentication for Windows machines based on their active directory membership. That works great for Windows hosts.
Appreciate any suggestions.