Template-ish profile to enable Active Directory account sign-in at the Loginwindow

com.org.loginwindowwifi.mobileconfig

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>PayloadContent</key>
	<array>
		<dict>
			<key>PayloadContent</key>
			<data>
			# Base64-encoded cert if necessary
			</data>
			<key>PayloadEnabled</key>
			<true/>
			<key>PayloadIdentifier</key>
			<string>com.org.radiuscert</string>
			<key>PayloadType</key>
			<string>com.apple.security.root</string>
			<key>PayloadUUID</key>
			<string>db61408f-ee3f-486a-8910-30fdbf5a10b5</string>
			<key>PayloadVersion</key>
			<integer>1</integer>
			<key>updated_at_xid</key>
			<integer>270993</integer>
		</dict>
		<dict>
			<key>AuthenticationMethod</key>
			<string>directory</string>
			<key>AutoJoin</key>
			<true/>
			<key>EAPClientConfiguration</key>
			<dict>
				<key>AcceptEAPTypes</key>
				<array>
					<integer>25</integer>
				</array>
				<key>OneTimeUserPassword</key>
				<false/>
				<key>PayloadCertificateAnchorUUID</key>
				<array>
					<string>db61408f-ee3f-486a-8910-30fdbf5a10b5</string>
				</array>
				<key>SystemModeCredentialsSource</key>
				<string>ActiveDirectory</string>
				<key>UserName</key>
				<string></string>
				<key>UserPassword</key>
				<string></string>
			</dict>
			<key>EncryptionType</key>
			<string>WPA2</string>
			<key>HIDDEN_NETWORK</key>
			<false/>
			<key>Interface</key>
			<string>BuiltInWireless</string>
			<key>PayloadDisplayName</key>
			<string>Wifi Settings</string>
			<key>PayloadEnabled</key>
			<true/>
			<key>PayloadIdentifier</key>
			<string>com.org.arandomidentifier</string>
			<key>PayloadType</key>
			<string>com.apple.wifi.managed</string>
			<key>PayloadUUID</key>
			<string>19c2e4b0-363f-0134-d62f-2820662942f4</string>
			<key>PayloadVersion</key>
			<integer>1</integer>
			<key>ProxyType</key>
			<string>None</string>
			<key>SSID_STR</key>
			<string>YourSSIDHere</string>
			<key>SetupModes</key>
			<array>
				<string>Loginwindow</string>
			</array>
		</dict>
	</array>
	<key>PayloadDisplayName</key>
	<string>Wifi Settings</string>
	<key>PayloadIdentifier</key>
	<string>com.org.LoginwindowWifi.profile</string>
	<key>PayloadOrganization</key>
	<string>Your Org</string>
	<key>PayloadRemovalDisallowed</key>
	<true/>
	<key>PayloadScope</key>
	<string>LoginWindow</string>
	<key>PayloadType</key>
	<string>Configuration</string>
	<key>PayloadUUID</key>
	<string>ecd5b320-363e-0134-d62d-2820662942f4</string>
	<key>PayloadVersion</key>
	<integer>1</integer>
</dict>
</plist>