No we do log in as admin to the AP - and it is greyed out. It seems you can't have ICC and Auth running at the same time for obvious reasons. You wouldn't want anyone with a canopy to automatically connect. My thought was that somehow Powercode or some other external force would have the MAC of the device asking to connect ahead of time and allow it without any form of authentication. It would push it to the AP and the AP would allow it. It would open it up to spoofing but that would get figured out quickly at a higher level.
So we always need to enable auth on a radio before we do the actual automatic config in our particular situation.
Just so you know what I meanL
For example on the AP
On the Radio tab ICC is Enabled
On the Security Tab "Bypass Authentication for ICC SMs:" Disabled, greyed out and we can't enable it.