EAP-TLS with Entra ID in ISE 3.4

[rajesh halvi]

Hi Team,

  Cisco has announced in last summer that they are going to introduce EAP-TLS device certificate based authentication with Entra ID. Did any one have this feature tested or enabled in cisco ISE 3.4?

[Greg Gibbs · Accepted solution]

This feature is not available yet. It is expected in a future patch for 3.4, but there is currently no ETA.

And, just to be clear, it will enable Authorization of a device against Entra ID, not Authentication.

[stayd]

Hi, last summer was announced, but currently no ETA.

Why not ? Why it was annonced in such case ?

[Greg Gibbs]

Roadmap items are always subject to change without notice. I am not with the BU and have no control over these releases, but I can say that supporting this flow was much more complicated than originally expected, mainly due to how things work on the Microsoft side.

I believe this is currently planned for 3.4 patch 2, but again this could slip without notice.

[rajesh halvi]

Thanks @Greg Gibbs. Yes. I meant Authorization. This feature is very much needed for our Org. so waiting for update from cisco.