NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
nanorobocop
May 07, 2020Tutor
How to disable SSO login?
Hi here! I'm happy owner of Netgear WAC124 access point. Firmware Version V1.0.4.4 When setup first time I've created netgear account and registered the product. But on next logins it always re...
nanorobocop
Sep 10, 2020Tutor
Hi, I contacted Netgear support about this topic.
This is the answer:
> I am sorry but the SSO was intentionally designed for the WAC124 and there is nothing to fix about it.
What I also discovered about SSO page is that it exposes login information to 3rd party domains like gigya.com, googletagmanager.com, google-analyticss.com, doubleclick.net. Request to those domains includes your device serial number! You can check in browser dev tools about that.
Netgear support answered to that:
> These are to check if there is any system downtime internally in the background and some of them are for google analytics which they have configured to trace the logs of users. Google analytics is basically to track the number of users visiting accounts portal login screen, signup screen, 2FA screen, login settings screens. Apart from it, we don't track users personal information as per the Privacy Policy of NETGEAR
I'm not sure how this behaviour could comply with privacy policy.
But in any case I don't agree with that and decided to return my device and swtich to normal brand instead of using Netgear.
Pjpj
Sep 10, 2020Tutor
Yeah. I waited too long to return mine so it went into the electronics waste disposal. If I can't have a local login and keep mine and my devices info private, I will just buy a different brand. Which I did. I think Netgear maybe miscalculated on this one.
- HubertusHanielSep 10, 2020Tutor
I think Netgear is going on my "not to buy brand" list - I have had lots of Netgear equipment over the years and was always happy with it but the last 3 devices have been an absolute nightmare. I had the WN3500RP wifi extender that always went via mywifiext.com for some sort of authentication and I managed to stop that by creating a local DNS override to point that domain to the local IP address. I bought the WAC124 to use as a simple access point to replace my WAC120 which I had to reset at least once a week as it would drop connections or start slowing down traffic so it was even slower then my legacy access points which I never have to touch. With this WAC124 I can not disable the SSO without DNS blacklisting the whole of netgear.com and even once you are logged in to the device it is riddled with bugs. - I can not see what devices are blocked or allowed in the MAC access list and when the access list the logs fill up with mac addresses which are not even physically attached to the device.
I wonder if https://openwrt.org/toh/netgear/netgear_wac124?s[]=wac124 may be an option but I have never used Open-WRT. I do have another netgear device with DD-WRT on it which is very reliable but unfortunately the WAC124 is not listed on their site
- HubertusHanielSep 10, 2020Tutor
Just as an update - I have applied OpenWRT to this access point now - installation was a easy but I had to get in via the lan ports to set the password and then follow separate instructions to get the web interface going which was a little bit fiddly - It is now all up and running with the configuration I want and loads of extras that this access point could not do before. Hopefully it will be stable with it which will take a few weeks to find out. If not I already have a dlink access point on order which is slightly slower but I can live with that since my broadband is very slow any way.
- nanorobocopSep 11, 2020Tutor
Thanks for update!
But I believe switching to openwrt firware - disables warranty, doesn't it?
- schumakuNov 11, 2020Guru - Experienced User
HubertusHaniel wrote:I had the WN3500RP wifi extender that always went via mywifiext.com for some sort of authentication and I managed to stop that by creating a local DNS override to point that domain to the local IP address.
That's exactly what the extenders do when connecting a system to the extender (wireless or wired) and the user does call mywifiext.com (and .net fwiw) - except if some secured/encrypted DNS is used, in that case you end on Netgear's landing page instead on the extender login. You can connect to to any extender without any internet connection using these special domains.
- bizprotechMar 03, 2021Aspirant
I'm doing the same, no more NetGear purchases. WHy would NetGear for Business think it's OK to create personal password secrets and force a login to manage their crap. Ridiculous, this is not acceptable.
- schumakuMar 03, 2021Guru - Experienced User
This problem does only apply to the WAC124.
YeZ can this unliked design replaced by a standard Netgear wireless AP version, too?
On the cloud manageable switches where such a similar feature briefly showed up in the second half of 2020, it's no longer required anymore, too.
Related Content
NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!