11-24-2025 03:00 PM
Hello Greg,
refer to the link - https://community.cisco.com/t5/security-knowledge-base/cisco-ise-with-microsoft-active-directory-entra-id-and-intune/ta-p/4763635/page/2/show-comments/true
whats the difference between EAP-TLS and TEAP ( EAP-TLS ) as i marked below ?
Solved! Go to Solution.
11-25-2025 01:31 AM
Hello @MSJ1
EAP-TLS = straight certificate authentication.
TEAP (EAP-TLS) = EAP-TLS run inside a TEAP tunnel, allowing features like user+machine chaining in one session...
11-24-2025 03:02 PM
ok I see below note from your knowledge base for Entra ID
TEAP provides the ability to pass more than one credential via EAP. When used with the ‘User or computer authentication’ method, it allows the supplicant to provide both the Computer and User credentials in a single session using a feature called EAP Chaining. Cisco ISE can use this EAP Chaining result as a matching condition in the Authorization Policy rules. Like PEAP, TEAP is an outer protocol method that uses inner protocol methods such as EAP-TLS and MSCHAPv2 to provide User and/or Computer credentials that ISE can then authenticate individually against traditional AD
11-25-2025 01:31 AM
Hello @MSJ1
EAP-TLS = straight certificate authentication.
TEAP (EAP-TLS) = EAP-TLS run inside a TEAP tunnel, allowing features like user+machine chaining in one session...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide