Hello, in a corporate environment, you have your staff wifi users with mobile devices i.e iphones, tablets etc.
I understand it has not been feasbile to authenticate these users via wifi using 802.1x/radius/AD due to difficulties with certificates and the 802.1x supplicants on these mobile devices.
Therefore these staff mobile users are often put into their own speicial SSID with only PSK authentication. So it is essentially the same as a guest SSID but just with less firewalling restrictions i.e. no extra authentication security.

Is this still how things are done or do mobile devices now support 802.1x to such an extent that makes it feasbile to authorise them via 802.1x ?

Thanks for any advice.
How do you guys do it ?