How to set up RADIUS NPS with Azure AD DS managed domain

Question

Hi everyone,

I'm looking for advice about azure ad ds. For context, in my internship we use Azure AD and AZURE AD DS managed domain to manage domain and users, no AD DS on premise.

We're a new company (1.5y) and till now everything was working fine, but recently we became more concerned about security and wanted to put RADIUS/802.1X.

So I set up an NPS and an AD CS on LAN and join them to the Azure AD DS domain. AD CS is ok now (even if it was a pain in the ass with managed domain) but impossible to configure the final part with NPS, all is configured but user can't connect, I have an error with dial in properties of the user, it is set up on "determined by Network Policy Server (NPS)"

And impossible to change it (managed domain) and in NPS policy I check the "Yes for all user + Ignore dial in properties" but still don't work, event manager said dial in properties don't allow the users;

Have I done a mistake in configuration or is it just impossible with Azure AD DS and the managed domain ? Do I have any other alternatives other than setting up a local AD DS?

And what about Azure AD DS in the long term ? I don't understand the purpose if you can do nothing interesting with

Thx for your help, have a nice day !

Answer 1

Hello @Loïc , currently RADIUS is not supported by Azure Active Directory Domain Services. Work has been planned for the future but no ETA has been disclosed. As al anternative, you might consider trying RADIUS authentication with Microsoft Entra ID. The later requires Azure AD Connect and will work with your current AADDS instance.

Let us know if you need additional assistance. If the answer was helpful, please accept it and rate it so that others facing a similar issue can easily find a solution.

Answer 2

See this blog where it was successfully deployed also on AZ ADDS

https://blog.keithng.com.au/2021/04/12/azure-ad-radius/