Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
The way I handle this now is with my edge devices having a s2s to azure virtual gateway then deploy Entra domain services pair with a vm running radius. This is a monthly cost so it will be interesting to see how much Cisco will charge.
