Hi,
By reading many times this article would like to clarify the following on a Cloud only environment (Azure AD and Intune, NO ADCS and NO traditional AD):
Cisco ISE with Microsoft Active Directory, Azure AD, and Intune - Page 2 - Cisco Community
...