Security

Hi All,

What are current possibilities of ClearPass integration with Azure for authentication/authorization of Intune devices with SSO and dot1x.

Thanks

See if this helps

https://www.flomain.de/2020/02/clearpass-sso-with-azure-ad/

Hi All,

What are current possibilities of ClearPass integration with Azure for authentication/authorization of Intune devices with SSO and dot1x.

Thanks

Hi All,

What are current possibilities of ClearPass integration with Azure for authentication/authorization of Intune devices with SSO and dot1x.

Thanks

Regarding dot1x.

We supports the integration of AAD as an authorization source. You can fetch the group information from AAD for a user during authentication.

Besides this we supports Intune integration. The Intune integration can be used to fetch information of the endpoint from Intune during authentication. Please check 

Hi All,

What are current possibilities of ClearPass integration with Azure for authentication/authorization of Intune devices with SSO and dot1x.

Thanks

I used that doc and with Intune extension synced endpoints to ClearPass.

In that doc only is described HTTP authorization mode, where I can find info how to use local endpoint repository with new Intune attributes ?

Thanks

Regarding dot1x.

We supports the integration of AAD as an authorization source. You can fetch the group information from AAD for a user during authentication.

Besides this we supports Intune integration. The Intune integration can be used to fetch information of the endpoint from Intune during authentication. Please check 

Hi All,

What are current possibilities of ClearPass integration with Azure for authentication/authorization of Intune devices with SSO and dot1x.

Thanks

Version 6 is a big change. The authorization is now not done based on MAC address but based on Device ID which is in the client certificate. I'm not sure but I think its not possible anymore to sync all the endpoints to the endpoint database upfront. Please check page 29 and 30 of the document to store data in the endpoint database.

I used that doc and with Intune extension synced endpoints to ClearPass.

In that doc only is described HTTP authorization mode, where I can find info how to use local endpoint repository with new Intune attributes ?

Thanks

Regarding dot1x.

We supports the integration of AAD as an authorization source. You can fetch the group information from AAD for a user during authentication.

Besides this we supports Intune integration. The Intune integration can be used to fetch information of the endpoint from Intune during authentication. Please check 

Hi All,

What are current possibilities of ClearPass integration with Azure for authentication/authorization of Intune devices with SSO and dot1x.

Thanks

I used that doc and with Intune extension synced endpoints to ClearPass.

In that doc only is described HTTP authorization mode, where I can find info how to use local endpoint repository with new Intune attributes ?

Thanks

Regarding dot1x.

We supports the integration of AAD as an authorization source. You can fetch the group information from AAD for a user during authentication.

Besides this we supports Intune integration. The Intune integration can be used to fetch information of the endpoint from Intune during authentication. Please check 

Hi All,

What are current possibilities of ClearPass integration with Azure for authentication/authorization of Intune devices with SSO and dot1x.

Thanks

Please note that you cannot do EAP-PEAP authentication against Azure AD. To authenticate Azure AD users, you would need to setup EAP-TLS, where Intune is a logical candidate to configure/enroll the client certificates. Then you can use the Intune Extension for authorization against Intune Attributes; and starting ClearPass 6.11 the Azure AD Authorization Source for authorization against Azure AD attributes like AAD group membership.

I used that doc and with Intune extension synced endpoints to ClearPass.

In that doc only is described HTTP authorization mode, where I can find info how to use local endpoint repository with new Intune attributes ?

Thanks

Regarding dot1x.

We supports the integration of AAD as an authorization source. You can fetch the group information from AAD for a user during authentication.

Besides this we supports Intune integration. The Intune integration can be used to fetch information of the endpoint from Intune during authentication. Please check 

Hi All,

What are current possibilities of ClearPass integration with Azure for authentication/authorization of Intune devices with SSO and dot1x.

Thanks

If Azure AD can be only Authorization Source, then is local AD still used for authentication ? 

Please note that you cannot do EAP-PEAP authentication against Azure AD. To authenticate Azure AD users, you would need to setup EAP-TLS, where Intune is a logical candidate to configure/enroll the client certificates. Then you can use the Intune Extension for authorization against Intune Attributes; and starting ClearPass 6.11 the Azure AD Authorization Source for authorization against Azure AD attributes like AAD group membership.

I used that doc and with Intune extension synced endpoints to ClearPass.

In that doc only is described HTTP authorization mode, where I can find info how to use local endpoint repository with new Intune attributes ?

Thanks

Regarding dot1x.

We supports the integration of AAD as an authorization source. You can fetch the group information from AAD for a user during authentication.

Besides this we supports Intune integration. The Intune integration can be used to fetch information of the endpoint from Intune during authentication. Please check 

Hi All,

What are current possibilities of ClearPass integration with Azure for authentication/authorization of Intune devices with SSO and dot1x.

Thanks