In a rented office, workers are not assigned to specific cubes. The facility just began to use IEEE 802.1X authentication for the tenants. When workers have previously logged in to a PC, it works…

Machine authentication allows the PC itself to present credentials (typically a machine certificate) to the 802.1X authenticator before any user logs in, granting network access so that domain login services and user authentication can succeed on any device in the hot-desking environment, even one that has never been used before.

A BYOD portal addresses personal device onboarding, not the issue of corporate PCs that have never authenticated to the 802.1X infrastructure.

Disabling and re-enabling port authentication is a manual per-machine workaround that adds significant operational burden and does not scale in a hot-desking environment.

MAC Authentication Bypass authenticates devices solely by MAC address, which does not resolve the underlying missing-supplicant-configuration issue on new machines and introduces a security weakness.