My first answer is that I didn't realize this Microsoft solution existed. Quickly glancing through the documentation, though, it appears it's only for IOS and Android devices. I'd also need Windows and MacOS support to allow our users to connect from their laptops.
------------------------------
Adam Forsyth
------------------------------
Original Message:
Sent: Jun 02, 2021 10:18 AM
From: Tim C
Subject: Aruba VIA authenticated against Microsoft Azure with cloud MFA without Clear Pass
Why not use Microsoft's native solution which is already capable of modern auth?
Learn about the Microsoft Tunnel VPN solution for Microsoft Intune - Azure | Microsoft Docs
------------------------------
Tim C
Original Message:
Sent: Jun 02, 2021 09:56 AM
From: Adam Forsyth
Subject: Aruba VIA authenticated against Microsoft Azure with cloud MFA without Clear Pass
I found this document: Aruba VIA with Microsoft Cloud MFA it documents how to combine VIA, ClearPass, NPS and Microsoft's NPS Extension for Azure MFA to result in user access to Aruba VIA authenticating against Azure ADFS and requiring MFA.
Currently, we don't have Clear Pass. Our current implementation of VIA is authenticating against NPS which authenticates against our on premise AD, and access is authorized based on whether or not users are in a particular AD group.
It seems to me, I should be able to swap our our NPS without the MFA extension for one with the MFA extension, and use Azure MFA for VIA Authentication without needing clear pass. So far, however, my attempts have not succeeded.
Has anyone set up via and Azure authentication successfully this way? There isn't a similar document to the one I referenced above that I'm missing that documents a setup without Clear Pass is there? Any details I'm overlooking that would indicate the configuration I'm trying to build is not technically possible?
------------------------------
Adam Forsyth
------------------------------