Intune ISE Authentication policy wireless devices

[Geert Reijnders]

Hi all,

We are moving from AD to Intune and Azure AD. I can create the External MDM (Intune) server and its working fine. However, I want to create a new policy set for devices which migrated to Intune. Therefore I created a new SSID. But how can I authenticate the devices? How does the authentication policy looks? I can't select the MDM as our external identity store. We can't use the username/password option for connection to our wireless network, because the device should connect before the user logs into the device. Is the only option to use certifcates?

I did read a lot of documentation about this subject but I can't find our use case. Or I'm missing something, that is also possible of course

We are running ISE version 3.1 with patch 3 installed.

Hopefully someone could help me.

Thanks

Geert

[ahollifield · Accepted solution]

https://www.youtube.com/watch?v=iAKyIHFqbgE&t=2s

https://www.youtube.com/watch?v=857hIkxkEAU&list=PLvBZXH_IO6nDXHkNI7VF15sx1HR1NDq8Z&index=7

https://www.youtube.com/watch?v=icaSpZBLSFo&list=PLvBZXH_IO6nDXHkNI7VF15sx1HR1NDq8Z&index=6

[Geert Reijnders]

Thanks for your links. In the first video he talks about authentication. So the answer is certificates for now.

[rschlayer]

ISE 3.2 allows to use EAP-TLS with AzureAD might be worth to check it out.
Release Notes https://www.cisco.com/c/en/us/td/docs/security/ise/3-2/release_notes/b_ise_32_RN.html#Cisco_Concept.dita_ca1dd90a-c40f-4c83-9994-da8e5b4536ca

BR
Rick