Cisco ISE required licenses to use EntraID

[icarimo]

Hello,

I would like to validate if I can use Essential licenses to authenitcate my wireless users based on entraID, using certificate attributes and Active Directory Group membership in Authorization policy condition.

• Essential
• Advantage
• Premier

Note: I don't use MDM
Thank you

[JPavonM · Accepted solution]

Yes you can, connecting to Entra is supported with your license level.

[icarimo]

Thank you so much for the quick response.

Other doubt.
To authenticate my wireless users using traditional AD, I have a policy where I am validating if the computer name  (CN) on the certificate belongs to Computer domain group, I am not specifying a specific AD group.

Which EntraID attribute or membership group can I validate to authenticate my wireless users that are in EntraID? I don't want to specify a specific group (e.g., Sales, Marketing).

Thank you

[ahollifield]

https://community.cisco.com/t5/security-knowledge-base/cisco-ise-with-microsoft-active-directory-entra-id-and-intune/ta-p/4763635

[Greg Gibbs]

This question was posted to another discussion and the response was provided there. Please keep posts to a single specific topic and avoid double posting.