Wireless RADIUS Auth and Azure AD Devices

[lmrogers]

Good Morning,

 

Wondering if anyone can help or has any ideas. I have got a load of Windows laptops joined to Azure AD using RADIUS authentication to join the wireless. Currently it is setup to use the users AD logins to join the network but this is causing problems when the users AD passwords expire.

 

Has anyone managed to use an Azure AD group for RADIUS authentication?

 

The idea is to have a group of the laptop devices authenticating for wireless access.

 

Thanks

[houlta]

If you have a hybrid setup with local AD I suppose it's possible, I'd guess NPS would work as normal.

According to the m$ feedback forums it's still in development for azure radius support- https://feedback.azure.com/forums/169401-azure-active-directory/suggestions/34781713-support-nps-radius-for-azure-ad-domain-services

[TRS-80]

There's a few vendors that do cloud radius, jumpcloud and fox pass come to mind, but they cost money.

 

People have talked about enabling azure ad domain services and then running nps, but it's not supported. Here's someone claiming to have done it with packetfence: https://www.mail-archive.com/[email protected]/msg15760.html