Lock a device to an AP

The way I did this, assign different colors to APs and have a dedicated SSID only configured for these colors. Seems to work well.