To ensure users connecting to the 'Office' SSID at different branches have identical access, what must be the same at each site?

For users to have identical access across different branches when connecting to the same SSID, the security policies applied to that SSID must be consistent. This includes authentication methods (e.g., WPA2-Enterprise, WPA3), encryption protocols, and any associated RADIUS server configurations or access control lists (ACLs). If security policies differ, users might experience varying levels of access or even be unable to connect at some branches. While the radio policy (e.g., channel, power) and profile name are important for network operation and identification, they don't directly dictate user access rights. NAS-ID (Network Access Server Identifier) is used by RADIUS for identification but doesn't define the access policy itself.