ISE using Azure MFA and AD

[imsheikh]

Are there any white papers on configuration VPN Authorization in ISE using Azure MFA and AD?

[chacy2000]

ISE

---

@paul wrote:
It should be the same. At the end of the day it is just RADIUS calls into NPS. You can match on different RADIUS attributes in NPS if you want to build different policies. If you are ultimately going to go against ISE I would recommend keeping your NPS policy as generic as possible. Basically just have it run the MFA process. All the AD group checking stuff can occur in ISE.

---

RADIUS Token Server Supported Authentication Protocols

ISE Radius token with NPS solution only supported PAP protocol (ISE 2.4). Do you know if MSCHAPv2 protocol is now supported by ISE?

https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_01101.html

 

[Arjun Bhamra]

Is there any document that integrates Azure MFA on cloud 2020, with any-connect and all authorization from ISE, but Without ON PREM azure server . Microsoft no longer allows ON prep Azure MFA server. Has to be without DUO.

[vsurresh]

https://www.google.com/amp/s/packetswitch.co.uk/cisco-anyconnect-with-azure-ad/amp/

Here you go. I have the similar set up.

Authentication on Azure AD
Authorization on ISE.

[vsurresh]

Here you go 

https://www.google.com/amp/s/packetswitch.co.uk/cisco-anyconnect-with-azure-ad/amp/