Welcome to Cisco Support Community. We would love to have your feedback.
For an introduction to the new site, click here. And see here for current known issues.
How do you handle per phone user / password authentication when using EAP-FAST? Do you create 1 credential per user when you distribute the phone or do you have a shared credential for all your phones?
You can do either. But for stronger security, would suggest to have an account per phone. Also this can help when troubleshooting, tracking a phone.