ISE and Azure AD Integration

[Gaurav Sharma]

Hi Team,

does ISE supports integration with Azure AD now and will Cisco AnyConnect support checking if a machine is joined to Azure AD?

-Gaurav

[Marvin Rhoads]

ISE support AD integration in general. It doesn't care whether it is on-premises, off-premises or cloud-based.

As long as you deployment can join to the AD instance(s) it can use AD as an external identity store and check for Authentication and Authorization conditions (including machine membership) per your configured policy sets.

[Arne Bier]

I am starting to wonder whether it may make more sense to use LDAP for authentication to an Active Directory, instead of going the whole hog with an AD Join Point.  If the use case only requires user authentication and a few groups, then the single LDAP connection (TCP port) might be all you need.  And you could expose that secure port on your cloud based VM.  And of course use LDAPS (Secure LDAP) !!!