MicrosoftDocs / azure-docs

Open source documentation of Microsoft Azure
https://docs.microsoft.com/azure
Creative Commons Attribution 4.0 International
10.26k stars 21.43k forks source link

Radius Wifi User Authentication #81738

Closed danbu closed 3 years ago

danbu commented 3 years ago

https://docs.microsoft.com/en-us/azure/active-directory/devices/azureadjoin-plan#radius-and-wi-fi-authentication "Currently, Azure AD joined devices do not support RADIUS authentication for connecting to Wi-Fi access points, since RADIUS relies on presence of an on-premises computer object." This is assuming using RADIUS device(computer) authentication. If RADIUS is configured using user authentication, does Windows pass the logged in user authentication (Use my Windows user account as shown below " of the Azure AD account to RADIUS like with existing Local AD bound computers?

image

[Enter feedback here]


Document Details

Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

shashishailaj commented 3 years ago

@danbu Thank you for your query . We will investigate and update the thread.

vipulsparsh commented 3 years ago

@danbu Currently it is not possible with just Azure AD Join machines. You can try this workaround : https://sysmansquad.com/2021/04/27/working-around-nps-limitations-for-aadj-windows-devices/

If you use Intune and have on prem CA, you can try this as well with SCEP : https://oofhours.com/2020/04/05/intune-certificates-something-everyone-should-set-up/

danbu commented 3 years ago

@vipulsparsh So that article is again talking about device based authentication we only use 802.1x with User based RADIUS authentication not certificates using MSCHAPv2 PEAP

vipulsparsh commented 3 years ago

@danbu Its not possible then as of now.